Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20269

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user. This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following: Identify valid credentials that could then be used to establish an unauthorized remote access VPN session. Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier). Notes: Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured. This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured. Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 5.0, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts limited integrity, for affected systems. Impacting 2 products from cisco, from cisco organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-09-06T18:15:08.303

Last Modified

2025-10-28T13:59:45.003

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.0 (MEDIUM)

Weaknesses

Type: Secondary
CWE-288
Type: Primary
CWE-863

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	cisco	adaptive_security_appliance_software	9.8.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.1.5	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.1.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.8	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.14	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.17	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.20	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.24	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.26	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.28	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.33	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.35	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.2.38	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.8	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.11	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.14	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.16	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.18	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.21	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.26	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.3.29	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.8	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.10	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.12	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.17	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.20	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.22	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.25	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.26	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.29	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.32	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.33	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.34	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.35	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.39	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.40	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.41	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.43	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.44	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.45	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.46	Yes
Operating System	cisco	adaptive_security_appliance_software	9.8.4.48	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.1.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.1.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.2.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.2.4	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.2.5	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.2.9	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.3.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.3.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.3.9	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.3.12	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.4	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.8	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.10	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.13	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.18	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.24	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.26	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.29	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.30	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.35	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.37	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.38	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.39	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.40	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.41	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.47	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.48	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.50	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.52	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.54	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.55	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.56	Yes
Operating System	cisco	adaptive_security_appliance_software	9.12.4.58	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.1.6	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.1.10	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.1.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.1.19	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.1.30	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.2.4	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.2.8	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.2.13	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.2.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.3.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.3.9	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.3.11	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.3.13	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.3.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.3.18	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.6	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.12	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.13	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.14	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.17	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.22	Yes
Operating System	cisco	adaptive_security_appliance_software	9.14.4.23	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1.10	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1.16	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1.17	Yes
Operating System	cisco	adaptive_security_appliance_software	9.15.1.21	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.1.28	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.2.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.2.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.2.11	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.2.13	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.2.14	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.3.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.3.14	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.3.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.3.19	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.3.23	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.4	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.4.9	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.4.14	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.4.18	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.4.19	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.4.27	Yes
Operating System	cisco	adaptive_security_appliance_software	9.16.4.38	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.9	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.10	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.11	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.13	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.15	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.20	Yes
Operating System	cisco	adaptive_security_appliance_software	9.17.1.30	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.1.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.2	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.2.5	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.2.7	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.2.8	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.3	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.3.39	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.3.46	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.3.53	Yes
Operating System	cisco	adaptive_security_appliance_software	9.18.3.55	Yes
Operating System	cisco	adaptive_security_appliance_software	9.19.1	Yes
Operating System	cisco	adaptive_security_appliance_software	9.19.1.5	Yes
Operating System	cisco	adaptive_security_appliance_software	9.19.1.9	Yes
Operating System	cisco	adaptive_security_appliance_software	9.19.1.12	Yes
Operating System	cisco	adaptive_security_appliance_software	9.19.1.18	Yes
Application	cisco	firepower_threat_defense	6.2.3	Yes
Application	cisco	firepower_threat_defense	6.2.3.1	Yes
Application	cisco	firepower_threat_defense	6.2.3.2	Yes
Application	cisco	firepower_threat_defense	6.2.3.3	Yes
Application	cisco	firepower_threat_defense	6.2.3.4	Yes
Application	cisco	firepower_threat_defense	6.2.3.5	Yes
Application	cisco	firepower_threat_defense	6.2.3.6	Yes
Application	cisco	firepower_threat_defense	6.2.3.7	Yes
Application	cisco	firepower_threat_defense	6.2.3.8	Yes
Application	cisco	firepower_threat_defense	6.2.3.9	Yes
Application	cisco	firepower_threat_defense	6.2.3.10	Yes
Application	cisco	firepower_threat_defense	6.2.3.11	Yes
Application	cisco	firepower_threat_defense	6.2.3.12	Yes
Application	cisco	firepower_threat_defense	6.2.3.13	Yes
Application	cisco	firepower_threat_defense	6.2.3.14	Yes
Application	cisco	firepower_threat_defense	6.2.3.15	Yes
Application	cisco	firepower_threat_defense	6.2.3.16	Yes
Application	cisco	firepower_threat_defense	6.2.3.17	Yes
Application	cisco	firepower_threat_defense	6.2.3.18	Yes
Application	cisco	firepower_threat_defense	6.4.0	Yes
Application	cisco	firepower_threat_defense	6.4.0.1	Yes
Application	cisco	firepower_threat_defense	6.4.0.2	Yes
Application	cisco	firepower_threat_defense	6.4.0.3	Yes
Application	cisco	firepower_threat_defense	6.4.0.4	Yes
Application	cisco	firepower_threat_defense	6.4.0.5	Yes
Application	cisco	firepower_threat_defense	6.4.0.6	Yes
Application	cisco	firepower_threat_defense	6.4.0.7	Yes
Application	cisco	firepower_threat_defense	6.4.0.8	Yes
Application	cisco	firepower_threat_defense	6.4.0.9	Yes
Application	cisco	firepower_threat_defense	6.4.0.10	Yes
Application	cisco	firepower_threat_defense	6.4.0.11	Yes
Application	cisco	firepower_threat_defense	6.4.0.12	Yes
Application	cisco	firepower_threat_defense	6.4.0.13	Yes
Application	cisco	firepower_threat_defense	6.4.0.14	Yes
Application	cisco	firepower_threat_defense	6.4.0.15	Yes
Application	cisco	firepower_threat_defense	6.4.0.16	Yes
Application	cisco	firepower_threat_defense	6.6.0	Yes
Application	cisco	firepower_threat_defense	6.6.0.1	Yes
Application	cisco	firepower_threat_defense	6.6.1	Yes
Application	cisco	firepower_threat_defense	6.6.3	Yes
Application	cisco	firepower_threat_defense	6.6.4	Yes
Application	cisco	firepower_threat_defense	6.6.5	Yes
Application	cisco	firepower_threat_defense	6.6.5.1	Yes
Application	cisco	firepower_threat_defense	6.6.5.2	Yes
Application	cisco	firepower_threat_defense	6.6.7	Yes
Application	cisco	firepower_threat_defense	6.6.7.1	Yes
Application	cisco	firepower_threat_defense	6.7.0	Yes
Application	cisco	firepower_threat_defense	6.7.0.1	Yes
Application	cisco	firepower_threat_defense	6.7.0.2	Yes
Application	cisco	firepower_threat_defense	6.7.0.3	Yes
Application	cisco	firepower_threat_defense	7.0.0	Yes
Application	cisco	firepower_threat_defense	7.0.0.1	Yes
Application	cisco	firepower_threat_defense	7.0.1	Yes
Application	cisco	firepower_threat_defense	7.0.1.1	Yes
Application	cisco	firepower_threat_defense	7.0.2	Yes
Application	cisco	firepower_threat_defense	7.0.2.1	Yes
Application	cisco	firepower_threat_defense	7.0.3	Yes
Application	cisco	firepower_threat_defense	7.0.4	Yes
Application	cisco	firepower_threat_defense	7.0.5	Yes
Application	cisco	firepower_threat_defense	7.0.6	Yes
Application	cisco	firepower_threat_defense	7.1.0	Yes
Application	cisco	firepower_threat_defense	7.1.0.1	Yes
Application	cisco	firepower_threat_defense	7.1.0.2	Yes
Application	cisco	firepower_threat_defense	7.1.0.3	Yes
Application	cisco	firepower_threat_defense	7.2.0	Yes
Application	cisco	firepower_threat_defense	7.2.0.1	Yes
Application	cisco	firepower_threat_defense	7.2.1	Yes
Application	cisco	firepower_threat_defense	7.2.2	Yes
Application	cisco	firepower_threat_defense	7.2.3	Yes
Application	cisco	firepower_threat_defense	7.2.4	Yes
Application	cisco	firepower_threat_defense	7.2.4.1	Yes
Application	cisco	firepower_threat_defense	7.2.5	Yes
Application	cisco	firepower_threat_defense	7.3.0	Yes
Application	cisco	firepower_threat_defense	7.3.1	Yes
Application	cisco	firepower_threat_defense	7.3.1.1	Yes
Application	cisco	firepower_threat_defense	7.4.0	Yes

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC Vendor Advisory ([email protected])
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20269 US Government Resource (134c704f-9b21-4f2e-91b3-4a467353bcc0)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For cisco's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.