Home / Items
VulnerabilityKnown exploited · ransomwareExploit likelihood 27%
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
CVE-2023-20269 · CISA KEV · September 13, 2023
Summary
Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.
From CISA, quoted as published. Check the source before acting.
What to do
Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.
CISA required action, quoted.
Affected products
| Vendor | Product |
|---|---|
| Cisco | Adaptive Security Appliance and Firepower Threat Defense |
Why it's on these mode pages
- Maritime: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com