CVE-2014-8023

no score yetEPSS 1.8%

Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID CSCtz48533.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2015-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:adaptive_security_appliance_software

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8023
http://tools.cisco.com/security/center/viewAlert.x?alertId=37489
http://www.securityfocus.com/bid/72618
http://www.securitytracker.com/id/1031755
https://exchange.xforce.ibmcloud.com/vulnerabilities/100922

Check your stack JSON