onyx --cves cve-2023-20269
CVE-2023-20269
- score
- 4.8
- cvss
- 5.0
- epss
- 25.5%
- published
- 2023-09-06
- kev added
- 2023-09-13
- first seen
Cisco ASA and FTD Software contain a vulnerability caused by improper separation of AAA between remote access VPN and HTTPS management/tunnel features, letting unauthenticated or authenticated attackers conduct brute force attacks or establish clientless SSL VPN sessions with valid credentials, exploit requires specifying default connection profile or tunnel group.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Added to CISA KEV
- First advisory — CISA #StopRansomware: SafePay Ransomware
- Tracked by Onyx
Advisories
1 feed this week
Weaknesses
References 13
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC
- https://nvd.nist.gov/vuln/detail/CVE-2023-20269
- https://www.enisa.europa.eu/sites/default/files/2026-09/ENISA%20Threat%20Landscape%202026_Final.pdf
- https://securelist.com/global-report-security-services-2026/119233/
- https://www.antiy.net/p/inventory-of-active-ransomware-attack-groups-in-2025
- https://medium.com/@nshcthreatrecon/2025-manufacturing-sector-global-cyber-threat-landscape-b3ecd2835c14
- https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025
- https://www.levelblue.com/blogs/spiderlabs-blog/ttp-briefing-q2-2026
- https://www.picussecurity.com/resource/blog/top-10-ransomware-groups-of-2025
- https://arcticwolf.com/resource/aw/arctic-wolf-threat-report-2026
- https://5943619.hs-sites.com/hubfs/312-Year-in-Review/2026/Dragos-2026-OT-Cybersecurity-Report-A-Year-in-Review.pdf
- https://sed-cms.broadcom.com/sites/default/files/2026-01/RWN-2026-WP100_1.pdf
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20269