CVE-2023-20247

A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid username and password. This vulnerability is due to improper error handling during remote access VPN authentication. An attacker could exploit this vulnerability by sending crafted requests during remote access VPN session establishment. A successful exploit could allow the attacker to bypass the configured multiple certificate authentication policy while retaining the privileges and permissions associated with the original connection profile.

• CWE-288

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-multi-cert-dzA3h5PTVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-multi-cert-dzA3h5PTVendor Advisory

Published

Nov 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20241Multiple vulnerabilities in Cisco Secure Client Software, fo…5.5
• CVE-2023-20242A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-20243A vulnerability in the RADIUS message processing feature of …8.6
• CVE-2023-20244A vulnerability in the internal packet processing of Cisco F…8.6
• CVE-2023-20245Multiple vulnerabilities in the per-user-override feature of…5.8
• CVE-2023-20246Multiple Cisco products are affected by a vulnerability in S…5.3
• CVE-2023-20248A vulnerability in the web-based management interface of Cis…5.4
• CVE-2023-20249A vulnerability in the web-based management interface of Cis…5.4
• CVE-2023-2025OpenBlue Enterprise Manager Data Collector versions prior to…6.5
• CVE-2023-20250A vulnerability in the web-based management interface of Cis…7.2
• CVE-2023-20251A vulnerability in the memory buffer of Cisco Wireless LAN C…5.3
• CVE-2023-20252A vulnerability in the Security Assertion Markup Language (S…9.8