{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:09:01Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","canonical_url":"https://vulnslist.com/products/cisco-duo","product":{"name":"Cisco Duo","slug":"cisco-duo","vendor":"Cisco","aliases":[],"exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"source_refresh":{"cisco_advisories_at":"2026-07-21T03:00:03Z","cisco_csaf_at":"2026-07-21T05:14:24Z","nvd_at":"2026-07-21T05:16:30Z","cisa_kev_at":"2026-07-21T05:16:31Z","first_epss_at":"2026-07-21T05:16:34Z"},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","summary_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"visible_cve_count":5,"scope_counts":{"structured_affected":5},"kev_count":0,"highest_epss":0.00356,"newest_advisory_updated_at":"2024-03-08T18:23:38Z","last_advisory_updated_at":"2024-03-08T18:23:38Z","data_refreshed_at":"2026-07-21T05:16:34Z"},"public_evidence":[{"cve":{"id":"CVE-2022-20662"},"advisory":{"id":"cisco-sa-duo-macOS-bypass-uKZNpXE6","slug":"cisco-sa-duo-macos-bypass-ukznpxe6","title":"Cisco Duo for macOS Authentication Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-macOS-bypass-uKZNpXE6"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:57:59Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Duo","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00356,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-09-28T16:00:00Z","updated_at":"2022-09-29T21:21:01Z","advisory_updated_at":"2022-09-29T21:21:01Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-macOS-bypass-uKZNpXE6","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-macOS-bypass-uKZNpXE6"},"row_display_order":1},{"cve":{"id":"CVE-2023-20199"},"advisory":{"id":"cisco-sa-duo-mac-bypass-OyZpVPnx","slug":"cisco-sa-duo-mac-bypass-oyzpvpnx","title":"Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-mac-bypass-OyZpVPnx"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:57:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Duo","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00293,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2023-06-21T16:00:00Z","updated_at":"2023-06-21T16:00:00Z","advisory_updated_at":"2023-06-21T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-mac-bypass-OyZpVPnx","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-mac-bypass-OyZpVPnx"},"row_display_order":2},{"cve":{"id":"CVE-2024-20301"},"advisory":{"id":"cisco-sa-duo-win-bypass-pn42KKBm","slug":"cisco-sa-duo-win-bypass-pn42kkbm","title":"Cisco Duo Authentication for Windows Logon and RDP Authentication Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-win-bypass-pn42KKBm"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:57:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Duo","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00266,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-03-06T16:00:00Z","updated_at":"2024-03-06T16:00:00Z","advisory_updated_at":"2024-03-06T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-win-bypass-pn42KKBm","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-win-bypass-pn42KKBm"},"row_display_order":3},{"cve":{"id":"CVE-2023-20123"},"advisory":{"id":"cisco-sa-duo-replay-knuNKd","slug":"cisco-sa-duo-replay-knunkd","title":"Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-replay-knuNKd"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:57:56Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Duo","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00247,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2023-04-05T16:00:00Z","updated_at":"2023-06-23T16:48:56Z","advisory_updated_at":"2023-06-23T16:48:56Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-replay-knuNKd","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-replay-knuNKd"},"row_display_order":4},{"cve":{"id":"CVE-2024-20292"},"advisory":{"id":"cisco-sa-duo-infodisc-rLCEqm6T","slug":"cisco-sa-duo-infodisc-rlceqm6t","title":"Cisco Duo Authentication for Windows Logon and RDP Information Disclosure Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-infodisc-rLCEqm6T"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:57:54Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Duo","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00109,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-03-06T16:00:00Z","updated_at":"2024-03-08T18:23:38Z","advisory_updated_at":"2024-03-08T18:23:38Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-infodisc-rLCEqm6T","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-infodisc-rLCEqm6T"},"row_display_order":5}]}