Vulnerability in Cisco Adaptive Security Appliance Software
CVE-2023-20275
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user's IP address. It is not possible for the attacker to receive return packets.
EPSS: 0.004 (33.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N.
Affected products
- Cisco Adaptive_security_appliance_software — versions 9.8.1, 9.8.1.5, 9.8.1.7
- Cisco Adaptive Security Appliance (Asa) Software — versions 9.8.1, 9.8.1.5, 9.8.1.7
- Cisco Firepower Threat Defense Software — versions 6.2.3, 6.2.3.1, 6.2.3.2
- Cisco Firepower_threat_defense — versions 6.2.3, 6.2.3.1, 6.2.3.2
- Cisco Secure_firewall_threat_defense — versions 6.2.3, 6.2.3.1, 6.2.3.2
Weakness classification (CWE)
References
- psirt@cisco.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-20275?
- CVE-2023-20275 is a medium-severity vulnerability in Cisco Adaptive Security Appliance Software, classified under Origin Validation Error. CVSS score: 4.1/10. Published 2023-12-12.
- How severe is CVE-2023-20275?
- Medium severity. CVSS v3 base score is 4.1 out of 10.