CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20384

A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.6%

CVSS Severity

CVSS v3 Score 5.8

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-nsgacl-bypass-77XnEAsL

Products affected by CVE-2024-20384

Cisco » Firepower Threat Defense » Version: 7.0.0

cpe:2.3:a:cisco:firepower_threat_defense:7.0.0
Cisco » Firepower Threat Defense » Version: 7.0.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1
Cisco » Firepower Threat Defense » Version: 7.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.1
Cisco » Firepower Threat Defense » Version: 7.0.1.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1
Cisco » Firepower Threat Defense » Version: 7.0.2

cpe:2.3:a:cisco:firepower_threat_defense:7.0.2
Cisco » Firepower Threat Defense » Version: 7.0.2.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1
Cisco » Firepower Threat Defense » Version: 7.0.3

cpe:2.3:a:cisco:firepower_threat_defense:7.0.3
Cisco » Firepower Threat Defense » Version: 7.0.4

cpe:2.3:a:cisco:firepower_threat_defense:7.0.4
Cisco » Firepower Threat Defense » Version: 7.0.5

cpe:2.3:a:cisco:firepower_threat_defense:7.0.5
Cisco » Firepower Threat Defense » Version: 7.0.6

cpe:2.3:a:cisco:firepower_threat_defense:7.0.6
Cisco » Firepower Threat Defense » Version: 7.0.6.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.1
Cisco » Firepower Threat Defense » Version: 7.0.6.2

cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.2
Cisco » Firepower Threat Defense » Version: 7.1.0

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0
Cisco » Firepower Threat Defense » Version: 7.1.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1
Cisco » Firepower Threat Defense » Version: 7.1.0.2

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.2
Cisco » Firepower Threat Defense » Version: 7.1.0.3

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3
Cisco » Firepower Threat Defense » Version: 7.2.0

cpe:2.3:a:cisco:firepower_threat_defense:7.2.0
Cisco » Firepower Threat Defense » Version: 7.2.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1
Cisco » Firepower Threat Defense » Version: 7.2.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.1
Cisco » Firepower Threat Defense » Version: 7.2.2

cpe:2.3:a:cisco:firepower_threat_defense:7.2.2
Cisco » Firepower Threat Defense » Version: 7.2.3

cpe:2.3:a:cisco:firepower_threat_defense:7.2.3
Cisco » Firepower Threat Defense » Version: 7.2.4

cpe:2.3:a:cisco:firepower_threat_defense:7.2.4
Cisco » Firepower Threat Defense » Version: 7.2.4.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.4.1
Cisco » Firepower Threat Defense » Version: 7.2.5

cpe:2.3:a:cisco:firepower_threat_defense:7.2.5
Cisco » Firepower Threat Defense » Version: 7.2.5.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.1
Cisco » Firepower Threat Defense » Version: 7.2.5.2

cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.2
Cisco » Firepower Threat Defense » Version: 7.2.6

cpe:2.3:a:cisco:firepower_threat_defense:7.2.6
Cisco » Firepower Threat Defense » Version: 7.2.7

cpe:2.3:a:cisco:firepower_threat_defense:7.2.7
Cisco » Firepower Threat Defense » Version: 7.2.8

cpe:2.3:a:cisco:firepower_threat_defense:7.2.8
Cisco » Firepower Threat Defense » Version: 7.2.8.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.8.1
Cisco » Firepower Threat Defense » Version: 7.3.0

cpe:2.3:a:cisco:firepower_threat_defense:7.3.0
Cisco » Firepower Threat Defense » Version: 7.3.1

cpe:2.3:a:cisco:firepower_threat_defense:7.3.1
Cisco » Firepower Threat Defense » Version: 7.3.1.1

cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.1
Cisco » Firepower Threat Defense » Version: 7.3.1.2

cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.2
Cisco » Firepower Threat Defense » Version: 7.4.0

cpe:2.3:a:cisco:firepower_threat_defense:7.4.0
Cisco » Firepower Threat Defense » Version: 7.4.1

cpe:2.3:a:cisco:firepower_threat_defense:7.4.1
Cisco » Firepower Threat Defense » Version: 7.4.1.1

cpe:2.3:a:cisco:firepower_threat_defense:7.4.1.1
Cisco » Firepower Threat Defense » Version: 7.4.2

cpe:2.3:a:cisco:firepower_threat_defense:7.4.2
Cisco » Adaptive Security Appliance Software » Version: 9.16.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1
Cisco » Adaptive Security Appliance Software » Version: 9.16.1.28

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28
Cisco » Adaptive Security Appliance Software » Version: 9.16.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.11

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.13

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.14

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.7

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7
Cisco » Adaptive Security Appliance Software » Version: 9.16.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.14

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.15

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.19

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.23

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3
Cisco » Adaptive Security Appliance Software » Version: 9.16.4

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.14

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.18

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.18
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.19

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.27

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.38

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.39

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.42

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.48

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.55

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.57

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.61

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.9

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9
Cisco » Adaptive Security Appliance Software » Version: 9.17.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.10

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.11

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.13

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.15

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.20

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.30

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.33

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.39

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.7

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.9

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9
Cisco » Adaptive Security Appliance Software » Version: 9.18.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1
Cisco » Adaptive Security Appliance Software » Version: 9.18.1.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3
Cisco » Adaptive Security Appliance Software » Version: 9.18.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2
Cisco » Adaptive Security Appliance Software » Version: 9.18.2.5

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5
Cisco » Adaptive Security Appliance Software » Version: 9.18.2.7

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7
Cisco » Adaptive Security Appliance Software » Version: 9.18.2.8

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8
Cisco » Adaptive Security Appliance Software » Version: 9.18.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.39

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.46

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.53

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.55

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.56

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56
Cisco » Adaptive Security Appliance Software » Version: 9.18.4

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.22

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.24

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.29

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.5

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.8

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8
Cisco » Adaptive Security Appliance Software » Version: 9.19.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.12

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.18

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.22

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.24

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.27

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.28

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.31

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.5

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5
Cisco » Adaptive Security Appliance Software » Version: 9.19.1.9

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9
Cisco » Adaptive Security Appliance Software » Version: 9.20.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1
Cisco » Adaptive Security Appliance Software » Version: 9.20.1.5

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5
Cisco » Adaptive Security Appliance Software » Version: 9.20.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2
Cisco » Adaptive Security Appliance Software » Version: 9.20.2.10

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10
Cisco » Adaptive Security Appliance Software » Version: 9.20.2.21

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21
Cisco » Adaptive Security Appliance Software » Version: 9.20.2.22

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20384

Products

Pricing

Contact Us