« Volver al listado

CVE-2024-20384

Estado: AnalizadaMedia (5.8)—

A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device.

This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-20384",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-20384",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-23T18:42:42.413636Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco Adaptive Security Appliance (ASA) Software",
          "versions": [
            {
              "status": "affected",
              "version": "9.16.1"
            },
            {
              "status": "affected",
              "version": "9.16.1.28"
            },
            {
              "status": "affected",
              "version": "9.16.2"
            },
            {
              "status": "affected",
              "version": "9.16.2.3"
            },
            {
              "status": "affected",
              "version": "9.16.2.7"
            },
            {
              "status": "affected",
              "version": "9.16.2.11"
            },
            {
              "status": "affected",
              "version": "9.16.2.13"
            },
            {
              "status": "affected",
              "version": "9.16.2.14"
            },
            {
              "status": "affected",
              "version": "9.16.3"
            },
            {
              "status": "affected",
              "version": "9.16.3.3"
            },
            {
              "status": "affected",
              "version": "9.16.3.14"
            },
            {
              "status": "affected",
              "version": "9.16.3.15"
            },
            {
              "status": "affected",
              "version": "9.16.3.19"
            },
            {
              "status": "affected",
              "version": "9.16.3.23"
            },
            {
              "status": "affected",
              "version": "9.16.4"
            },
            {
              "status": "affected",
              "version": "9.16.4.9"
            },
            {
              "status": "affected",
              "version": "9.16.4.14"
            },
            {
              "status": "affected",
              "version": "9.16.4.18"
            },
            {
              "status": "affected",
              "version": "9.16.4.19"
            },
            {
              "status": "affected",
              "version": "9.16.4.27"
            },
            {
              "status": "affected",
              "version": "9.16.4.38"
            },
            {
              "status": "affected",
              "version": "9.16.4.39"
            },
            {
              "status": "affected",
              "version": "9.16.4.42"
            },
            {
              "status": "affected",
              "version": "9.16.4.48"
            },
            {
              "status": "affected",
              "version": "9.16.4.55"
            },
            {
              "status": "affected",
              "version": "9.16.4.57"
            },
            {
              "status": "affected",
              "version": "9.16.4.61"
            },
            {
              "status": "affected",
              "version": "9.17.1"
            },
            {
              "status": "affected",
              "version": "9.17.1.7"
            },
            {
              "status": "affected",
              "version": "9.17.1.9"
            },
            {
              "status": "affected",
              "version": "9.17.1.10"
            },
            {
              "status": "affected",
              "version": "9.17.1.11"
            },
            {
              "status": "affected",
              "version": "9.17.1.13"
            },
            {
              "status": "affected",
              "version": "9.17.1.15"
            },
            {
              "status": "affected",
              "version": "9.17.1.20"
            },
            {
              "status": "affected",
              "version": "9.17.1.30"
            },
            {
              "status": "affected",
              "version": "9.17.1.33"
            },
            {
              "status": "affected",
              "version": "9.17.1.39"
            },
            {
              "status": "affected",
              "version": "9.18.1"
            },
            {
              "status": "affected",
              "version": "9.18.1.3"
            },
            {
              "status": "affected",
              "version": "9.18.2"
            },
            {
              "status": "affected",
              "version": "9.18.2.5"
            },
            {
              "status": "affected",
              "version": "9.18.2.7"
            },
            {
              "status": "affected",
              "version": "9.18.2.8"
            },
            {
              "status": "affected",
              "version": "9.18.3"
            },
            {
              "status": "affected",
              "version": "9.18.3.39"
            },
            {
              "status": "affected",
              "version": "9.18.3.46"
            },
            {
              "status": "affected",
              "version": "9.18.3.53"
            },
            {
              "status": "affected",
              "version": "9.18.3.55"
            },
            {
              "status": "affected",
              "version": "9.18.3.56"
            },
            {
              "status": "affected",
              "version": "9.18.4"
            },
            {
              "status": "affected",
              "version": "9.18.4.5"
            },
            {
              "status": "affected",
              "version": "9.18.4.8"
            },
            {
              "status": "affected",
              "version": "9.18.4.22"
            },
            {
              "status": "affected",
              "version": "9.18.4.24"
            },
            {
              "status": "affected",
              "version": "9.18.4.29"
            },
            {
              "status": "affected",
              "version": "9.19.1"
            },
            {
              "status": "affected",
              "version": "9.19.1.5"
            },
            {
              "status": "affected",
              "version": "9.19.1.9"
            },
            {
              "status": "affected",
              "version": "9.19.1.12"
            },
            {
              "status": "affected",
              "version": "9.19.1.18"
            },
            {
              "status": "affected",
              "version": "9.19.1.22"
            },
            {
              "status": "affected",
              "version": "9.19.1.24"
            },
            {
              "status": "affected",
              "version": "9.19.1.27"
            },
            {
              "status": "affected",
              "version": "9.19.1.28"
            },
            {
              "status": "affected",
              "version": "9.19.1.31"
            },
            {
              "status": "affected",
              "version": "9.20.1"
            },
            {
              "status": "affected",
              "version": "9.20.1.5"
            },
            {
              "status": "affected",
              "version": "9.20.2"
            },
            {
              "status": "affected",
              "version": "9.20.2.10"
            },
            {
              "status": "affected",
              "version": "9.20.2.21"
            },
            {
              "status": "affected",
              "version": "9.20.2.22"
            }
          ]
        },
        {
          "vendor": "Cisco",
          "product": "Cisco Firepower Threat Defense Software",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.0.2.1"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.6"
            },
            {
              "status": "affected",
              "version": "7.0.6.1"
            },
            {
              "status": "affected",
              "version": "7.0.6.2"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "7.1.0.1"
            },
            {
              "status": "affected",
              "version": "7.1.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.2.0.1"
            },
            {
              "status": "affected",
              "version": "7.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.2.4"
            },
            {
              "status": "affected",
              "version": "7.2.4.1"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "7.2.5.1"
            },
            {
              "status": "affected",
              "version": "7.2.6"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.2.5.2"
            },
            {
              "status": "affected",
              "version": "7.2.8"
            },
            {
              "status": "affected",
              "version": "7.2.8.1"
            },
            {
              "status": "affected",
              "version": "7.3.0"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.2"
            },
            {
              "status": "affected",
              "version": "7.4.0"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.1"
            },
            {
              "status": "affected",
              "version": "7.4.2"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*"
          ],
          "vendor": "cisco",
          "product": "adaptive_security_appliance",
          "versions": [
            {
              "status": "affected",
              "version": "9.16.1",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.4.61"
            },
            {
              "status": "affected",
              "version": "9.17.1",
              "versionType": "custom",
              "lessThanOrEqual": "9.17.1.39"
            },
            {
              "status": "affected",
              "version": "9.18.1",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.4.29"
            },
            {
              "status": "affected",
              "version": "9.19.1",
              "versionType": "custom",
              "lessThanOrEqual": "9.19.1.31"
            },
            {
              "status": "affected",
              "version": "9.20.1",
              "versionType": "custom",
              "lessThanOrEqual": "9.20.2.22"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*"
          ],
          "vendor": "cisco",
          "product": "firepower_threat_defense_software",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.0",
              "versionType": "custom",
              "lessThanOrEqual": "7.0.6.2"
            },
            {
              "status": "affected",
              "version": "7.1.0",
              "versionType": "custom",
              "lessThanOrEqual": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.0",
              "versionType": "custom",
              "lessThanOrEqual": "7.2.8.1"
            },
            {
              "status": "affected",
              "version": "7.3.0",
              "versionType": "custom",
              "lessThanOrEqual": "7.3.1.2"
            },
            {
              "status": "affected",
              "version": "7.4.0",
              "versionType": "custom",
              "lessThanOrEqual": "7.4.2"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-10-23T18:15:07.030",
  "references": [
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-nsgacl-bypass-77XnEAsL",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-290"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device.\r\n\r This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la función Network Service Group (NSG) del software Cisco Adaptive Security Appliance (ASA) y del software Cisco Firepower Threat Defense (FTD) podría permitir que un atacante remoto no autenticado omita una lista de control de acceso (ACL) configurada y permita que el tráfico que debería estar denegado fluya a través de un dispositivo afectado. Esta vulnerabilidad se debe a un error lógico que ocurre cuando se completan las ACL de NSG en un dispositivo afectado. Un atacante podría aprovechar esta vulnerabilidad estableciendo una conexión con el dispositivo afectado. Una explotación exitosa podría permitir al atacante omitir las reglas de ACL configuradas."
    }
  ],
  "lastModified": "2026-08-11T19:33:44.513",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13F57A86-6284-4269-823E-B30C57185D14"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6560447-039C-40FA-A24D-C8994AC2743B"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "378ED826-F5FE-40BA-9FC0-9C185A13518B"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4875811-F209-49ED-B310-8377B2F87FF9"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08CCBF5E-257A-4A1F-8930-3643A9588838"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "782BC9ED-1395-472B-9F34-DED812AA5BFD"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "853A002C-839A-4372-8485-750A86E9F6E9"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34FE4F28-B704-4325-AE8A-C790163FEE71"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E832BC0C-8439-4779-9064-C2D93F231031"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA99DF94-D031-4375-9A16-306606FE28F4"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC149D03-5609-46E6-A1B3-F4D91F282B49"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24A810C8-1BB5-4589-84AB-C357C1937201"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB7D8466-0050-495A-9442-8C5FF3912F5F"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "959107AC-E9EC-467C-901B-A3164E3762E9"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E1E8552-58F0-491E-B7D7-E89527872FC6"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "289F9874-FC01-4809-9BDA-1AF583FB60B2"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "826869BE-4874-4BBA-9392-14851560BA10"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF52D477-3045-45D1-9FD3-12F396266463"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88E310BF-F1F6-4124-A875-81967B9B531E"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "552319A9-01F7-47BA-83B3-B2DD648AA07E"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4914603C-4B1B-48F1-826C-DB803BD21F87"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "852C3478-7529-4002-8540-ABA4D556DEFC"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23B8A815-5D58-4952-936E-D47B83637BEB"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C05599C9-C0DB-47C1-B145-C410076C1049"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20D7966E-B02B-48C8-BF96-723DD6C25314"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F635946-586D-4DE2-927B-300CE569C596"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA060112-E2D8-4EC5-8400-D8D189A119B5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3888BB0-B529-486C-8563-392BD1C5DFD5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "604568DA-466A-47C0-8229-C7F1A10FCDE9"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF19A26F-B257-4932-ADF5-3B585D6B5100"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "893B1060-336A-48B7-BF96-16D6A6752F44"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "479976B9-5B58-4A84-88C5-D81074DC98B2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3232A07-4B12-4681-BE61-9FCEEBE2A1F6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A904332-0AAD-4C6B-9D52-509A9A8B8D51"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1137D6CB-618A-488E-A0A9-C98C8A7CE2EE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "241A1DC5-7DCB-46D8-98E5-7CDD43968A64"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32290AE7-B7CF-4AF9-ACB0-6672D7E6B8C8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD417D1D-14B8-46AC-B7DD-35C6565E95C6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BAE72052-C1B0-4897-8303-BC0EFB3857D9"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36B7CF16-59A9-4298-90D8-1F4F5988F887"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AD3F514-9FBC-403C-8F8F-2507708D685F"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2155D80A-74AE-4403-8EC4-19054DE3476E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C69CE022-5FBF-48AE-B6AA-873261A201D1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30F5FE5C-E3BE-4C32-BB6F-E3785BA6CD15"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "237462A2-E0CF-4201-9115-D94910F9745B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CA2F5B0-0106-4FF2-91BD-AEF3F064F69E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF9FFE56-9A00-456E-B097-114F714133BD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E253A08-B4D4-4E81-9D5A-C15D198C43AC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59C7F868-1571-44CC-90E1-7A5EA01E63FC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7432B6F9-03CD-4373-B281-2A09864E7828"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D42B7E6-71ED-48BA-B11F-6791FE96C1B2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39CC3AC6-6F75-43BF-BBC9-F74AADB74716"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FFBAC033-FF89-4581-92F6-EA4FFEE40F54"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AF3CB27-8315-452F-80E1-5DAF883319B1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A910367-E5D5-4817-9DAA-3225D4FA8055"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38EC17C6-2DA5-4E26-987A-FD14F539F55B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25E3D7DE-90EB-4531-BD7D-738637A83CD4"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E7FE2B9-65C0-4F7F-8810-72BFE861C521"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD33999C-8DE7-4C0C-A8E5-1BA7127E36FE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A977F379-2F93-4A56-B0A6-C45AEF274123"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA7FA3B6-D630-42E3-B69F-B20D38B33531"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B125CC4-0DAE-4C26-9A27-2532BB09EA8A"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BC88149-095A-41DE-AA27-1CFD21125EF4"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA983223-35AE-4D2F-B2F5-BA0614908C3B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17A31A33-2E84-4C79-86BD-1E9FF4C1DD09"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B58DC884-9430-49D4-AA8B-7FEB7505B7A8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}