Cisco ASA/FTD AnyConnect ACL Bypass Vulnerabilities (CVE-2024-20297/20299)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Adaptive Security Appliance and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities - Vulnerability ID: cisco-sa-asafld-acl-bypass-VvnLNKqf - CVE Numbers: CVE-2024-20297, CVE-2024-20299 - CVSS Score: Base 5.8 2. Affected Products: - Cisco Adaptive Security Appliance (ASA) Software - Cisco Firepower Threat Defense (FTD) Software 3. Impact: - These vulnerabilities allow unauthorized remote attackers to bypass configured Access Control Lists (ACLs) and permit traffic that should be denied to pass through the affected devices. 4. Cause: - Due to a logic error in how the AnyConnect client populates ACLs on affected devices when establishing new sessions. 5. Remediation: - Cisco has released software updates to address these vulnerabilities. There are no workarounds for these vulnerabilities. 6. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 7. Workarounds: - No workarounds are available for these vulnerabilities. 8. Affected Products List: - Cisco Adaptive Security Appliance (ASA) Software - Cisco Firepower Threat Defense (FTD) Software 9. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 10. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 11. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 12. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 13. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 14. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 15. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 16. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 17. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 18. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 19. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 20. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 21. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 22. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 23. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 24. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 25. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 26. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 27. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 28. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 29. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 30. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 31. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 32. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 33. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 34. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 35. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 36. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Software Release 7.2.0 or earlier. 37. Affected Software Versions: - Cisco ASA Software Release 9.18.1 or earlier, or Cisco FTD Soft

Goal Reached Thanks to every supporter — we hit 100%!

Cisco ASA/FTD AnyConnect ACL Bypass Vulnerabilities (CVE-2024-20297/20299)