This vulnerability arises from a logic error in how group access control policies (ACPs) are populated when Object Group Search (OGS) is configured in Cisco Secure Firewall ASA and FTD Software. The flaw allows an unauthenticated remote attacker to bypass access controls by sending traffic that should be blocked, effectively circumventing the ACL protections. The issue affects multiple specific versions of Cisco ASA Software, and an official patch has been released to address the problem.

Successful exploitation allows an unauthenticated remote attacker to bypass configured access controls on the firewall, potentially enabling unauthorized network traffic to reach protected devices. This could undermine network segmentation and security policies but does not directly impact confidentiality or availability according to the CVSS vector.

An official fix is available from Cisco for this vulnerability. Users should apply the vendor-provided patches to affected versions of Cisco Secure Firewall ASA and FTD Software to remediate the issue. No additional mitigation actions are indicated beyond applying the official fix.