{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20384", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.658Z", "datePublished": "2024-10-23T17:32:29.353Z", "dateUpdated": "2024-10-24T17:04:49.872Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-10-23T17:32:29.353Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device.\r\n\r This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules."}], "affected": [{"vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "versions": [{"version": "9.16.1", "status": "affected"}, {"version": "9.16.1.28", "status": "affected"}, {"version": "9.16.2", "status": "affected"}, {"version": "9.16.2.3", "status": "affected"}, {"version": "9.16.2.7", "status": "affected"}, {"version": "9.16.2.11", "status": "affected"}, {"version": "9.16.2.13", "status": "affected"}, {"version": "9.16.2.14", "status": "affected"}, {"version": "9.16.3", "status": "affected"}, {"version": "9.16.3.3", "status": "affected"}, {"version": "9.16.3.14", "status": "affected"}, {"version": "9.16.3.15", "status": "affected"}, {"version": "9.16.3.19", "status": "affected"}, {"version": "9.16.3.23", "status": "affected"}, {"version": "9.16.4", "status": "affected"}, {"version": "9.16.4.9", "status": "affected"}, {"version": "9.16.4.14", "status": "affected"}, {"version": "9.16.4.18", "status": "affected"}, {"version": "9.16.4.19", "status": "affected"}, {"version": "9.16.4.27", "status": "affected"}, {"version": "9.16.4.38", "status": "affected"}, {"version": "9.16.4.39", "status": "affected"}, {"version": "9.16.4.42", "status": "affected"}, {"version": "9.16.4.48", "status": "affected"}, {"version": "9.16.4.55", "status": "affected"}, {"version": "9.16.4.57", "status": "affected"}, {"version": "9.16.4.61", "status": "affected"}, {"version": "9.17.1", "status": "affected"}, {"version": "9.17.1.7", "status": "affected"}, {"version": "9.17.1.9", "status": "affected"}, {"version": "9.17.1.10", "status": "affected"}, {"version": "9.17.1.11", "status": "affected"}, {"version": "9.17.1.13", "status": "affected"}, {"version": "9.17.1.15", "status": "affected"}, {"version": "9.17.1.20", "status": "affected"}, {"version": "9.17.1.30", "status": "affected"}, {"version": "9.17.1.33", "status": "affected"}, {"version": "9.17.1.39", "status": "affected"}, {"version": "9.18.1", "status": "affected"}, {"version": "9.18.1.3", "status": "affected"}, {"version": "9.18.2", "status": "affected"}, {"version": "9.18.2.5", "status": "affected"}, {"version": "9.18.2.7", "status": "affected"}, {"version": "9.18.2.8", "status": "affected"}, {"version": "9.18.3", "status": "affected"}, {"version": "9.18.3.39", "status": "affected"}, {"version": "9.18.3.46", "status": "affected"}, {"version": "9.18.3.53", "status": "affected"}, {"version": "9.18.3.55", "status": "affected"}, {"version": "9.18.3.56", "status": "affected"}, {"version": "9.18.4", "status": "affected"}, {"version": "9.18.4.5", "status": "affected"}, {"version": "9.18.4.8", "status": "affected"}, {"version": "9.18.4.22", "status": "affected"}, {"version": "9.18.4.24", "status": "affected"}, {"version": "9.18.4.29", "status": "affected"}, {"version": "9.19.1", "status": "affected"}, {"version": "9.19.1.5", "status": "affected"}, {"version": "9.19.1.9", "status": "affected"}, {"version": "9.19.1.12", "status": "affected"}, {"version": "9.19.1.18", "status": "affected"}, {"version": "9.19.1.22", "status": "affected"}, {"version": "9.19.1.24", "status": "affected"}, {"version": "9.19.1.27", "status": "affected"}, {"version": "9.19.1.28", "status": "affected"}, {"version": "9.19.1.31", "status": "affected"}, {"version": "9.20.1", "status": "affected"}, {"version": "9.20.1.5", "status": "affected"}, {"version": "9.20.2", "status": "affected"}, {"version": "9.20.2.10", "status": "affected"}, {"version": "9.20.2.21", "status": "affected"}, {"version": "9.20.2.22", "status": "affected"}]}, {"vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "versions": [{"version": "7.0.0", "status": "affected"}, {"version": "7.0.0.1", "status": "affected"}, {"version": "7.0.1", "status": "affected"}, {"version": "7.0.1.1", "status": "affected"}, {"version": "7.0.2", "status": "affected"}, {"version": "7.0.2.1", "status": "affected"}, {"version": "7.0.3", "status": "affected"}, {"version": "7.0.4", "status": "affected"}, {"version": "7.0.5", "status": "affected"}, {"version": "7.0.6", "status": "affected"}, {"version": "7.0.6.1", "status": "affected"}, {"version": "7.0.6.2", "status": "affected"}, {"version": "7.1.0", "status": "affected"}, {"version": "7.1.0.1", "status": "affected"}, {"version": "7.1.0.2", "status": "affected"}, {"version": "7.1.0.3", "status": "affected"}, {"version": "7.2.0", "status": "affected"}, {"version": "7.2.0.1", "status": "affected"}, {"version": "7.2.1", "status": "affected"}, {"version": "7.2.2", "status": "affected"}, {"version": "7.2.3", "status": "affected"}, {"version": "7.2.4", "status": "affected"}, {"version": "7.2.4.1", "status": "affected"}, {"version": "7.2.5", "status": "affected"}, {"version": "7.2.5.1", "status": "affected"}, {"version": "7.2.6", "status": "affected"}, {"version": "7.2.7", "status": "affected"}, {"version": "7.2.5.2", "status": "affected"}, {"version": "7.2.8", "status": "affected"}, {"version": "7.2.8.1", "status": "affected"}, {"version": "7.3.0", "status": "affected"}, {"version": "7.3.1", "status": "affected"}, {"version": "7.3.1.1", "status": "affected"}, {"version": "7.3.1.2", "status": "affected"}, {"version": "7.4.0", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.4.1.1", "status": "affected"}, {"version": "7.4.2", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Authentication Bypass by Spoofing", "type": "cwe", "cweId": "CWE-290"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-nsgacl-bypass-77XnEAsL", "name": "cisco-sa-asaftd-nsgacl-bypass-77XnEAsL"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "baseScore": 5.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-asaftd-nsgacl-bypass-77XnEAsL", "discovery": "INTERNAL", "defects": ["CSCwj19125"]}}, "adp": [{"affected": [{"vendor": "cisco", "product": "adaptive_security_appliance", "cpes": ["cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "9.16.1", "status": "affected", "lessThanOrEqual": "9.16.4.61", "versionType": "custom"}, {"version": "9.17.1", "status": "affected", "lessThanOrEqual": "9.17.1.39", "versionType": "custom"}, {"version": "9.18.1", "status": "affected", "lessThanOrEqual": "9.18.4.29", "versionType": "custom"}, {"version": "9.19.1", "status": "affected", "lessThanOrEqual": "9.19.1.31", "versionType": "custom"}, {"version": "9.20.1", "status": "affected", "lessThanOrEqual": "9.20.2.22", "versionType": "custom"}]}, {"vendor": "cisco", "product": "firepower_threat_defense_software", "cpes": ["cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.0.0", "status": "affected", "lessThanOrEqual": "7.0.6.2", "versionType": "custom"}, {"version": "7.1.0", "status": "affected", "lessThanOrEqual": "7.1.0.3", "versionType": "custom"}, {"version": "7.2.0", "status": "affected", "lessThanOrEqual": "7.2.8.1", "versionType": "custom"}, {"version": "7.3.0", "status": "affected", "lessThanOrEqual": "7.3.1.2", "versionType": "custom"}, {"version": "7.4.0", "status": "affected", "lessThanOrEqual": "7.4.2", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-23T18:42:42.413636Z", "id": "CVE-2024-20384", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-24T17:04:49.872Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20384", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-23T18:42:42.413636Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "adaptive_security_appliance", "versions": [{"status": "affected", "version": "9.16.1", "versionType": "custom", "lessThanOrEqual": "9.16.4.61"}, {"status": "affected", "version": "9.17.1", "versionType": "custom", "lessThanOrEqual": "9.17.1.39"}, {"status": "affected", "version": "9.18.1", "versionType": "custom", "lessThanOrEqual": "9.18.4.29"}, {"status": "affected", "version": "9.19.1", "versionType": "custom", "lessThanOrEqual": "9.19.1.31"}, {"status": "affected", "version": "9.20.1", "versionType": "custom", "lessThanOrEqual": "9.20.2.22"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "firepower_threat_defense_software", "versions": [{"status": "affected", "version": "7.0.0", "versionType": "custom", "lessThanOrEqual": "7.0.6.2"}, {"status": "affected", "version": "7.1.0", "versionType": "custom", "lessThanOrEqual": "7.1.0.3"}, {"status": "affected", "version": "7.2.0", "versionType": "custom", "lessThanOrEqual": "7.2.8.1"}, {"status": "affected", "version": "7.3.0", "versionType": "custom", "lessThanOrEqual": "7.3.1.2"}, {"status": "affected", "version": "7.4.0", "versionType": "custom", "lessThanOrEqual": "7.4.2"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-24T17:04:39.360Z"}}], "cna": {"source": {"defects": ["CSCwj19125"], "advisory": "cisco-sa-asaftd-nsgacl-bypass-77XnEAsL", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "versions": [{"status": "affected", "version": "9.16.1"}, {"status": "affected", "version": "9.16.1.28"}, {"status": "affected", "version": "9.16.2"}, {"status": "affected", "version": "9.16.2.3"}, {"status": "affected", "version": "9.16.2.7"}, {"status": "affected", "version": "9.16.2.11"}, {"status": "affected", "version": "9.16.2.13"}, {"status": "affected", "version": "9.16.2.14"}, {"status": "affected", "version": "9.16.3"}, {"status": "affected", "version": "9.16.3.3"}, {"status": "affected", "version": "9.16.3.14"}, {"status": "affected", "version": "9.16.3.15"}, {"status": "affected", "version": "9.16.3.19"}, {"status": "affected", "version": "9.16.3.23"}, {"status": "affected", "version": "9.16.4"}, {"status": "affected", "version": "9.16.4.9"}, {"status": "affected", "version": "9.16.4.14"}, {"status": "affected", "version": "9.16.4.18"}, {"status": "affected", "version": "9.16.4.19"}, {"status": "affected", "version": "9.16.4.27"}, {"status": "affected", "version": "9.16.4.38"}, {"status": "affected", "version": "9.16.4.39"}, {"status": "affected", "version": "9.16.4.42"}, {"status": "affected", "version": "9.16.4.48"}, {"status": "affected", "version": "9.16.4.55"}, {"status": "affected", "version": "9.16.4.57"}, {"status": "affected", "version": "9.16.4.61"}, {"status": "affected", "version": "9.17.1"}, {"status": "affected", "version": "9.17.1.7"}, {"status": "affected", "version": "9.17.1.9"}, {"status": "affected", "version": "9.17.1.10"}, {"status": "affected", "version": "9.17.1.11"}, {"status": "affected", "version": "9.17.1.13"}, {"status": "affected", "version": "9.17.1.15"}, {"status": "affected", "version": "9.17.1.20"}, {"status": "affected", "version": "9.17.1.30"}, {"status": "affected", "version": "9.17.1.33"}, {"status": "affected", "version": "9.17.1.39"}, {"status": "affected", "version": "9.18.1"}, {"status": "affected", "version": "9.18.1.3"}, {"status": "affected", "version": "9.18.2"}, {"status": "affected", "version": "9.18.2.5"}, {"status": "affected", "version": "9.18.2.7"}, {"status": "affected", "version": "9.18.2.8"}, {"status": "affected", "version": "9.18.3"}, {"status": "affected", "version": "9.18.3.39"}, {"status": "affected", "version": "9.18.3.46"}, {"status": "affected", "version": "9.18.3.53"}, {"status": "affected", "version": "9.18.3.55"}, {"status": "affected", "version": "9.18.3.56"}, {"status": "affected", "version": "9.18.4"}, {"status": "affected", "version": "9.18.4.5"}, {"status": "affected", "version": "9.18.4.8"}, {"status": "affected", "version": "9.18.4.22"}, {"status": "affected", "version": "9.18.4.24"}, {"status": "affected", "version": "9.18.4.29"}, {"status": "affected", "version": "9.19.1"}, {"status": "affected", "version": "9.19.1.5"}, {"status": "affected", "version": "9.19.1.9"}, {"status": "affected", "version": "9.19.1.12"}, {"status": "affected", "version": "9.19.1.18"}, {"status": "affected", "version": "9.19.1.22"}, {"status": "affected", "version": "9.19.1.24"}, {"status": "affected", "version": "9.19.1.27"}, {"status": "affected", "version": "9.19.1.28"}, {"status": "affected", "version": "9.19.1.31"}, {"status": "affected", "version": "9.20.1"}, {"status": "affected", "version": "9.20.1.5"}, {"status": "affected", "version": "9.20.2"}, {"status": "affected", "version": "9.20.2.10"}, {"status": "affected", "version": "9.20.2.21"}, {"status": "affected", "version": "9.20.2.22"}]}, {"vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "versions": [{"status": "affected", "version": "7.0.0"}, {"status": "affected", "version": "7.0.0.1"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "7.0.1.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.0.2.1"}, {"status": "affected", "version": "7.0.3"}, {"status": "affected", "version": "7.0.4"}, {"status": "affected", "version": "7.0.5"}, {"status": "affected", "version": "7.0.6"}, {"status": "affected", "version": "7.0.6.1"}, {"status": "affected", "version": "7.0.6.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "7.1.0.1"}, {"status": "affected", "version": "7.1.0.2"}, {"status": "affected", "version": "7.1.0.3"}, {"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.2.0.1"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "7.2.3"}, {"status": "affected", "version": "7.2.4"}, {"status": "affected", "version": "7.2.4.1"}, {"status": "affected", "version": "7.2.5"}, {"status": "affected", "version": "7.2.5.1"}, {"status": "affected", "version": "7.2.6"}, {"status": "affected", "version": "7.2.7"}, {"status": "affected", "version": "7.2.5.2"}, {"status": "affected", "version": "7.2.8"}, {"status": "affected", "version": "7.2.8.1"}, {"status": "affected", "version": "7.3.0"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.3.1.1"}, {"status": "affected", "version": "7.3.1.2"}, {"status": "affected", "version": "7.4.0"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.4.1.1"}, {"status": "affected", "version": "7.4.2"}]}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-nsgacl-bypass-77XnEAsL", "name": "cisco-sa-asaftd-nsgacl-bypass-77XnEAsL"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device.\r\n\r This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-290", "description": "Authentication Bypass by Spoofing"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-10-23T17:32:29.353Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20384", "state": "PUBLISHED", "dateUpdated": "2024-10-24T17:04:49.872Z", "dateReserved": "2023-11-08T15:08:07.658Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-10-23T17:32:29.353Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device.\r\n\r This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules."}, {"lang": "es", "value": "Una vulnerabilidad en la funci\u00f3n Network Service Group (NSG) del software Cisco Adaptive Security Appliance (ASA) y del software Cisco Firepower Threat Defense (FTD) podr\u00eda permitir que un atacante remoto no autenticado omita una lista de control de acceso (ACL) configurada y permita que el tr\u00e1fico que deber\u00eda estar denegado fluya a trav\u00e9s de un dispositivo afectado. Esta vulnerabilidad se debe a un error l\u00f3gico que ocurre cuando se completan las ACL de NSG en un dispositivo afectado. Un atacante podr\u00eda aprovechar esta vulnerabilidad estableciendo una conexi\u00f3n con el dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante omitir las reglas de ACL configuradas."}], "id": "CVE-2024-20384", "lastModified": "2024-10-25T12:56:36.827", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "ykramarz@cisco.com", "type": "Secondary"}]}, "published": "2024-10-23T18:15:07.030", "references": [{"source": "ykramarz@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-nsgacl-bypass-77XnEAsL"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-290"}], "source": "ykramarz@cisco.com", "type": "Secondary"}]}

{}