CVE-2023-20269 (adaptive_security_appliance_software, firepower_threat_defense)

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.

This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and …

access asa attack attacker brute cisco cve defense feature firepower identify password remote access security session software ssl ssl vpn threat threat defense unauthenticated username valid vpn vulnerability