This vulnerability arises from a logic error in how group access control policies (ACPs) are populated when Object Group Search (OGS) is configured in Cisco Secure Firewall ASA and FTD software. An unauthenticated remote attacker could exploit this flaw by sending traffic that bypasses the intended access control restrictions, allowing access to protected network resources. The CVSS v3.1 base score is 5.8 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, scope changed, no confidentiality impact, limited integrity impact, and no availability impact. The affected versions include multiple specific releases of Cisco ASA software as listed. There is no information about available patches or vendor advisories in the provided data.

Successful exploitation allows an unauthenticated remote attacker to bypass configured access controls on the Cisco Secure Firewall ASA and FTD devices. This could enable the attacker to send traffic that should be blocked, potentially reaching devices in protected networks. The integrity of the network is impacted, but confidentiality and availability are not affected according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no vendor advisory or patch information is provided, users should monitor Cisco's official security advisories for updates and apply any official fixes once available. Until then, consider reviewing and tightening access control configurations as a precaution.