CVE-2022-20928 — Incorrect Authorization in Cisco Adaptive Security Appliance Software

CWE-863 — Incorrect Authorization4 documents4 sources
Severity
5.8MEDIUMNVD
EPSS
0.2%
top 63.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Cisco Adaptive Security Appliance SoftwareCisco Firepower Services Software FOR ASACisco Firepower Threat Defense Software+2 more
Timeline
PublishedNov 15
Latest updateNov 16

Description

A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to establish a connection as a different user. This vulnerability is due to a flaw in the authorization verifications during the VPN authentication flow. An attacker could exploit this vulnerability by sending a crafted packet during a VPN authentication. The attacker must …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages5 packages

▶NVDcisco/firepower_threat_defense87 versions+86

🔴Vulnerability Details

2
GHSA
GHSA-575c-j9f6-j63w: A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Th↗2022-11-16
▶
CVEList
CVE-2022-20928: A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Th↗2022-11-10
▶

📋Vendor Advisories

1
Cisco
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability↗2022-11-09
▶
CVE-2022-20928 — Incorrect Authorization in Cisco | cvebase