Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2026-20073

Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability

At a glance

Severity
MEDIUM 5.8
EPSS
EPSS 0.40 % · percentile 35 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
cisco
NVD status
Analyzed

Description

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device. This vulnerability is due to improper error handling when an affected device that is joining a cluster runs out of memory while replicating access control rules. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks.

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:Ncisco
CVSS 3.1MEDIUM 5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NNVD · psirt@cisco.com (Secondary)

Weaknesses (CWE)

European references

Affected configurations (NVD CPE)

Affected products

ProductVersions
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected 9.12.3 ; affected 9.12.1 ; affected 9.12.2 ; affected 9.12.4 ; affected 9.12.3.2 ; affected 9.12.3.7
Cisco · Cisco Secure Firewall Threat Defense (FTD) Softwareaffected 6.4.0.1 ; affected 6.4.0.2 ; affected 6.4.0.5 ; affected 6.4.0 ; affected 6.4.0.3 ; affected 6.4.0.4

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD