CVE-2024-20297 | Cisco ASA/Firepower Threat Defense AnyConnect authentication spoofing (cisco-sa-asaftd-acl-bypass-VvnLNKqf)

A vulnerability was found in Cisco ASA and Firepower Threat Defense. It has been classified as critical. This affects an unknown part of the component AnyConnect. The manipulation leads to authentication bypass by spoofing.

This vulnerability is uniquely identified as CVE-2024-20297. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.