Cisco Secure Firewall ASA and FTD Software Access Control List Bypass Vulnerability

A vulnerability exists in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. It allows an unauthenticated, remote attacker to send traffic that should be denied through an affected device. This issue arises from improper error handling when a device joining a cluster runs out of memory while replicating access control rules. Exploitation of this vulnerability could enable an attacker to bypass access controls and access devices in protected networks.

Impact

Exploitation of this vulnerability can lead to unauthorized access to devices in protected networks by bypassing access control lists (ACLs) on the affected device.

Remediation

Cisco has released software updates to address this vulnerability. Instructions for upgrading Cisco Secure FTD devices can be found in the Cisco Secure FMC upgrade guide.