Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2024-0450 10 CVEs

Cisco Adaptive Security Appliance (ASA) und Cisco Firepower Threat Defense (FTD): Mehrere Schwachstellen

Published May 6, 2020 · Updated Feb 21, 2024 · Revision 4 · de-DE

Vendor: Cisco Product: ASA (Adaptive Security Appliance) Product: Firepower

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Adaptive Security Appliance (ASA) und Cisco Firepower Threat Defense (FTD) ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren oder vertrauliche Informationen einzusehen.

Product

Die Cisco ASA Appliance bietet Funktionen zur Sicherung von Anwendungssoftware, wie beispielsweise Firewall oder VPN.
Firepower ist eine Firewall-Plattform von Cisco

Vulnerabilities 10

  • High 7.5
    CVE-2020-3259 Exploited · Ransomware EPSS 72%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Feb 15, 2024
  • Critical 9.1
    CVE-2020-3187 Public exploit Scanner template EPSS 97%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and dele…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2020-3191

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability

    A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a deni…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2020-3195

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability

    A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected d…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2020-3196

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability

    A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust memory re…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2020-3254

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities

    Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servi…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2020-3298

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability

    A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the reload of an affected devi…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 6.8
    CVE-2020-3303

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability

    A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) con…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 6.8
    CVE-2020-3305

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability

    A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servic…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 6.8
    CVE-2020-3306

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability

    A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The v…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices

Revision history

  1. #4

    Aktive Ausnutzung gemeldet

  2. #3

    Exploit aufgenommen

  3. #2

    Anpassung zur Bewertung der Schadenshöhe

  4. #1

    Initiale Fassung

References