CVE-2023-20269

Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

Cisco Adaptive Security Appliance and Firepower Threat DefenseNetwork & edge

CVSS

5.0Medium

ExploitationExploited in the wildAdded to KEV 13 Sep 2023. Known ransomware useCISA KEV

Exploit odds (EPSS)25.5%Chance of exploitation activity in the next 30 days, higher than 97% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version. Check the vendor advisory below

Federal deadline4 Oct 2023Remediation due date for US federal agenciesCISA KEV

CISA required actionApply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

6 Sep 2023, 17:09 UTCPublishedCVE List
13 Sep 2023Added to CISA KEVCISA KEV
20 Oct 2026, 12:00 UTCFirst reported exploitedCISA advisories

Vendor and government advisories 1

Vendors that say their products are affected, and agencies that issued alerts. Check each for the fixed release of the product you run.

#StopRansomware: SafePay RansomwareCISA advisories, 20 Oct 2026Government

Reports 1

One outlet reports exploitation. Reports are not confirmation; each links to its source.

#StopRansomware: SafePay RansomwareCISA advisories, 20 Oct 2026Exploitation reported

Description

Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.

Text from CVE List

Affected versions 60

Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.1CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.1.5CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.1.7CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.8CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.14CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.15CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.17CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.20CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.24CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.26CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.28CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.33CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.35CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.38CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.8CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.11CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.14CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.16CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.18CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.21CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.26CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.29CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.3CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.7CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.8CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.10CVE List
Cisco Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.12CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.1CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.2CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.3CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.4CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.5CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.6CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.7CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.8CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.10CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.11CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.9CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.12CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.13CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.14CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.15CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.16CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.17CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.2.3.18CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.0CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.0.1CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.1CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.3CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.4CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.5CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.5.1CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.5.2CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.7CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.6.7.1CVE List
Cisco Firepower Threat Defense Softwareaffected: 6.4.0CVE List