Cisco Event Response Page

Cisco Event Response: November 2023 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication

Doc ID:

ERP-74985

First Published:

2023 November 1 16:00 GMT

Last Updated:

2023 November 1 17:46 GMT

Version:

1.1

Summary

Cisco released its semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication on November 1, 2023.

The November 1, 2023, release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication includes 22 Cisco Security Advisories that describe 27 vulnerabilities in Cisco ASA, FMC, and FTD. Cisco has released software updates that address these vulnerabilities.

Details

The following table identifies Cisco Security content that is associated with this bundled publication:

Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
Cisco Firepower Management Center Software Command Injection Vulnerability	CVE-2023-20048	Critical	9.9
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ICMPv6 Message Processing Denial of Service Vulnerability	CVE-2023-20086	High	8.6
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability	CVE-2023-20095	High	8.6
Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Firewalls Inspection Rules Denial of Service Vulnerability	CVE-2023-20244	High	8.6
Cisco Firepower Threat Defense Software ICMPv6 with Snort 2 Denial of Service Vulnerability	CVE-2023-20083	High	8.6
Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability	CVE-2023-20063	High	8.2
Cisco Firepower Management Center Software Log API Denial of Service Vulnerability	CVE-2023-20155	High	7.5
Cisco Firepower Management Center Software Command Injection Vulnerabilities	CVE-2023-20219 CVE-2023-20220	High	7.2
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software AnyConnect SSL/TLS VPN Denial of Service Vulnerability	CVE-2023-20042	Medium	6.8
Cisco Firepower Management Center Software Arbitrary File Download Vulnerability	CVE-2023-20114	Medium	6.5
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SAML Assertion Hijack Vulnerability	CVE-2023-20264	Medium	6.1
Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities	CVE-2023-20005 CVE-2023-20041 CVE-2023-20074 CVE-2023-20206	Medium	6.1
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities	CVE-2023-20245 CVE-2023-20256	Medium	5.8
Cisco Firepower Threat Defense Software SMB Protocol Snort 3 Detection Engine Bypass and Denial of Service Vulnerability	CVE-2023-20270	Medium	5.8
Multiple Cisco Products Snort 3 Access Control Policy Bypass Vulnerability	CVE-2023-20246	Medium	5.8
Multiple Cisco Products Snort FTP Inspection Bypass Vulnerability	CVE-2023-20071	Medium	5.8
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Multiple Certificate Authentication Bypass Vulnerability	CVE-2023-20247	Medium	5
Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability	CVE-2022-20713	Medium	4.3
Cisco Firepower Threat Defense Software Snort 3 Detection Engine Denial of Service Vulnerability	CVE-2023-20070	Medium	4
Cisco Firepower Threat Defense Software Snort 3 Geolocation IP Filter Bypass Vulnerability	CVE-2023-20267	Medium	4
Cisco Firepower Threat Defense Software SSL and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability	CVE-2023-20031	Medium	4
Cisco Firepower Threat Defense Software SSL/TLS URL Category and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability	CVE-2023-20177	Medium	4

Related Resources

Cisco Security Vulnerability Policy
MITRE Common Vulnerabilities and Exposures
Common Vulnerability Scoring System and the Security Impact Rating
Common Vulnerability Scoring System Q & A