CVE-2023-20269
Review this vulnerability's source-backed evidence, with unavailable values and read failures kept distinct.
A permanent, source-backed tracker page. Values are shown only when returned; explicit gaps and read failures remain different states.
Detection and validation
Mapped metadata availability only. These signals do not change priority.
Sigma
User Added to Local Administrator Group. Level: medium. Status: stable.
Open Sigma metadataAtomic
Azure Persistence Automation Runbook Created or Modified. Executor: powershell. Elevation: not required.
Open Atomic metadataNuclei
Not mapped by tracked sources.
What it is
ReportedCisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.
Source reported · Source: NVD · Source last published: · Source description excerpt; complete tracked detail loads below. · Source last updated: · Tracker data as of:
What is affected
ReportedCisco; Adaptive Security Appliance and Firepower Threat Defense. Product-level identification only; no affected-version conclusion is available from this field.
Source reported · Source: NVD · Source last published: · Source last updated: · Tracker data as of:
Urgency and basis
ReportedAct now · 560.9
Tracker computed · Tracker decision tier from the evidence detailed below · Source last updated: · Tracker data as of:
Exploitation evidence
ReportedActive exploitation · CISA KEV · VulnCheck KEV · ENISA exploited-vulnerability catalog
Source reported · Active since: · CISA KEV added: · VulnCheck KEV added: · ENISA added: · Source last updated: · Tracker data as of:
What to do
ReportedApply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.
Source remediation ↗Source reported · Tracked source remediation field · Source last updated: · Tracker data as of:
Evidence detail
Loading the full tracker evidence record…