CVE-2022-20928

score

<0.1

cvss

5.8

epss

0.8%

published

2022-11-15

kev added

—

first seen

2026-10-21

Cisco ASA and FTD Software contain a flaw in the authorization verification during VPN authentication, letting unauthenticated remote attackers establish a connection as a different user, exploit requires valid credentials and crafted packets.