description: A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user's IP address. It is not possible for the attacker to receive return packets.
problem types: Origin Validation Error
affected:
{
vendor: Cisco
product: Cisco Adaptive Security Appliance (ASA) Software
versions:
version: 9.8.1, status: affected
version: 9.8.1.5, status: affected
version: 9.8.1.7, status: affected
version: 9.8.2, status: affected
version: 9.8.2.8, status: affected
version: 9.8.2.14, status: affected
version: 9.8.2.15, status: affected
version: 9.8.2.17, status: affected
version: 9.8.2.20, status: affected
version: 9.8.2.24, status: affected
version: 9.8.2.26, status: affected
version: 9.8.2.28, status: affected
version: 9.8.2.33, status: affected
version: 9.8.2.35, status: affected
version: 9.8.2.38, status: affected
version: 9.8.3.8, status: affected
version: 9.8.3.11, status: affected
version: 9.8.3.14, status: affected
version: 9.8.3.16, status: affected
version: 9.8.3.18, status: affected
version: 9.8.3.21, status: affected
version: 9.8.3, status: affected
version: 9.8.3.26, status: affected
version: 9.8.3.29, status: affected
version: 9.8.4, status: affected
version: 9.8.4.3, status: affected
version: 9.8.4.7, status: affected
version: 9.8.4.8, status: affected
version: 9.8.4.10, status: affected
version: 9.8.4.12, status: affected
version: 9.8.4.15, status: affected
version: 9.8.4.17, status: affected
version: 9.8.4.25, status: affected
version: 9.8.4.20, status: affected
version: 9.8.4.22, status: affected
version: 9.8.4.26, status: affected
version: 9.8.4.29, status: affected
version: 9.8.4.32, status: affected
version: 9.8.4.33, status: affected
version: 9.8.4.34, status: affected
version: 9.8.4.35, status: affected
version: 9.8.4.39, status: affected
version: 9.8.4.40, status: affected
version: 9.8.4.41, status: affected
version: 9.8.4.43, status: affected
version: 9.8.4.44, status: affected
version: 9.8.4.45, status: affected
version: 9.8.4.46, status: affected
version: 9.8.4.48, status: affected
version: 9.12.1, status: affected
version: 9.12.1.2, status: affected
version: 9.12.1.3, status: affected
version: 9.12.2, status: affected
version: 9.12.2.4, status: affected
version: 9.12.2.5, status: affected
version: 9.12.2.9, status: affected
version: 9.12.3, status: affected
version: 9.12.3.2, status: affected
version: 9.12.3.7, status: affected
version: 9.12.4, status: affected
version: 9.12.3.12, status: affected
version: 9.12.3.9, status: affected
version: 9.12.2.1, status: affected
version: 9.12.4.2, status: affected
version: 9.12.4.4, status: affected
version: 9.12.4.7, status: affected
version: 9.12.4.10, status: affected
version: 9.12.4.13, status: affected
version: 9.12.4.8, status: affected
version: 9.12.4.18, status: affected
version: 9.12.4.24, status: affected
version: 9.12.4.26, status: affected
version: 9.12.4.29, status: affected
version: 9.12.4.30, status: affected
version: 9.12.4.35, status: affected
version: 9.12.4.37, status: affected
version: 9.12.4.38, status: affected
version: 9.12.4.39, status: affected
version: 9.12.4.40, status: affected
version: 9.12.4.41, status: affected
version: 9.12.4.47, status: affected
version: 9.12.4.48, status: affected
version: 9.12.4.50, status: affected
version: 9.12.4.52, status: affected
version: 9.12.4.54, status: affected
version: 9.12.4.55, status: affected
version: 9.12.4.56, status: affected
version: 9.12.4.58, status: affected
version: 9.14.1, status: affected
version: 9.14.1.10, status: affected
version: 9.14.1.6, status: affected
version: 9.14.1.15, status: affected
version: 9.14.1.19, status: affected
version: 9.14.1.30, status: affected
version: 9.14.2, status: affected
version: 9.14.2.4, status: affected
version: 9.14.2.8, status: affected
version: 9.14.2.13, status: affected
version: 9.14.2.15, status: affected
version: 9.14.3, status: affected
version: 9.14.3.1, status: affected
version: 9.14.3.9, status: affected
version: 9.14.3.11, status: affected
version: 9.14.3.13, status: affected
version: 9.14.3.18, status: affected
version: 9.14.3.15, status: affected
version: 9.14.4, status: affected
version: 9.14.4.6, status: affected
version: 9.14.4.7, status: affected
version: 9.14.4.12, status: affected
version: 9.14.4.13, status: affected
version: 9.14.4.14, status: affected
version: 9.14.4.15, status: affected
version: 9.14.4.17, status: affected
version: 9.14.4.22, status: affected
version: 9.14.4.23, status: affected
version: 9.15.1, status: affected
version: 9.15.1.7, status: affected
version: 9.15.1.10, status: affected
version: 9.15.1.15, status: affected
version: 9.15.1.16, status: affected
version: 9.15.1.17, status: affected
version: 9.15.1.1, status: affected
version: 9.15.1.21, status: affected
version: 9.16.1, status: affected
version: 9.16.1.28, status: affected
version: 9.16.2, status: affected
version: 9.16.2.3, status: affected
version: 9.16.2.7, status: affected
version: 9.16.2.11, status: affected
version: 9.16.2.13, status: affected
version: 9.16.2.14, status: affected
version: 9.16.3, status: affected
version: 9.16.3.3, status: affected
version: 9.16.3.14, status: affected
version: 9.16.3.15, status: affected
version: 9.16.3.19, status: affected
version: 9.16.3.23, status: affected
version: 9.16.4, status: affected
version: 9.16.4.9, status: affected
version: 9.16.4.14, status: affected
version: 9.16.4.18, status: affected
version: 9.16.4.19, status: affected
version: 9.16.4.27, status: affected
version: 9.17.1, status: affected
version: 9.17.1.7, status: affected
version: 9.17.1.9, status: affected
version: 9.17.1.10, status: affected
version: 9.17.1.11, status: affected
version: 9.17.1.13, status: affected
version: 9.17.1.15, status: affected
version: 9.17.1.20, status: affected
version: 9.17.1.30, status: affected
version: 9.18.1, status: affected
version: 9.18.1.3, status: affected
version: 9.18.2, status: affected
version: 9.18.2.5, status: affected
version: 9.18.2.7, status: affected
version: 9.18.2.8, status: affected
version: 9.18.3, status: affected
version: 9.18.3.39, status: affected
version: 9.18.3.46, status: affected
version: 9.19.1, status: affected
version: 9.19.1.5, status: affected
version: 9.19.1.9, status: affected
version: 9.19.1.12, status: affected
}
{
vendor: Cisco
product: Cisco Firepower Threat Defense Software
versions:
version: 6.2.3, status: affected
version: 6.2.3.1, status: affected
version: 6.2.3.2, status: affected
version: 6.2.3.3, status: affected
version: 6.2.3.4, status: affected
version: 6.2.3.5, status: affected
version: 6.2.3.6, status: affected
version: 6.2.3.7, status: affected
version: 6.2.3.8, status: affected
version: 6.2.3.10, status: affected
version: 6.2.3.11, status: affected
version: 6.2.3.9, status: affected
version: 6.2.3.12, status: affected
version: 6.2.3.13, status: affected
version: 6.2.3.14, status: affected
version: 6.2.3.15, status: affected
version: 6.2.3.16, status: affected
version: 6.2.3.17, status: affected
version: 6.2.3.18, status: affected
version: 6.6.0, status: affected
version: 6.6.0.1, status: affected
version: 6.6.1, status: affected
version: 6.6.3, status: affected
version: 6.6.4, status: affected
version: 6.6.5, status: affected
version: 6.6.5.1, status: affected
version: 6.6.5.2, status: affected
version: 6.6.7, status: affected
version: 6.6.7.1, status: affected
version: 6.4.0, status: affected
version: 6.4.0.1, status: affected
version: 6.4.0.3, status: affected
version: 6.4.0.2, status: affected
version: 6.4.0.4, status: affected
version: 6.4.0.5, status: affected
version: 6.4.0.6, status: affected
version: 6.4.0.7, status: affected
version: 6.4.0.8, status: affected
version: 6.4.0.9, status: affected
version: 6.4.0.10, status: affected
version: 6.4.0.11, status: affected
version: 6.4.0.12, status: affected
version: 6.4.0.13, status: affected
version: 6.4.0.14, status: affected
version: 6.4.0.15, status: affected
version: 6.4.0.16, status: affected
version: 6.7.0, status: affected
version: 6.7.0.1, status: affected
version: 6.7.0.2, status: affected
version: 6.7.0.3, status: affected
version: 7.0.0, status: affected
version: 7.0.0.1, status: affected
version: 7.0.1, status: affected
version: 7.0.1.1, status: affected
version: 7.0.2, status: affected
version: 7.0.2.1, status: affected
version: 7.0.3, status: affected
version: 7.0.4, status: affected
version: 7.0.5, status: affected
version: 7.0.6, status: affected
version: 7.1.0, status: affected
version: 7.1.0.1, status: affected
version: 7.1.0.2, status: affected
version: 7.1.0.3, status: affected
version: 7.2.0, status: affected
version: 7.2.0.1, status: affected
version: 7.2.1, status: affected
version: 7.2.2, status: affected
version: 7.2.3, status: affected
version: 7.2.4, status: affected
version: 7.3.0, status: affected
version: 7.3.1, status: affected
version: 7.3.1.1, status: affected
}
metrics:
format: cvssV3_1
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
baseScore: 4.1
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
]
exploits: The Cisco Product Security Incident Response Team (PSIRT) is aware of public announcements about the vulnerability that is described in this advisory.
The Cisco PSIRT is not aware of any malicious use of the vulnerability that is described in this advisory.