CVE-2020-3554: falha de alta gravidade em Cisco Adaptive Security Appliance (ASA) Software
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 2.7%
A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory exhaustion condition. An attacker could exploit this vulnerability by sending a high rate of crafted TCP traffic through an affected device. A successful exploit could allow the attacker to exhaust device resources, resulting in a DoS condition for traffic transiting the affected device.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Cisco · Cisco Adaptive Security Appliance (ASA) SoftwareCVEs relacionadas — Cisco Adaptive Security Appliance (ASA) Software
No mesmo produto, das mais perigosas para as menos.
CVE-2020-3452HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal VulnerabilityEPSS 100.0%KEVCVE-2020-3580MEDIUMCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesEPSS 85.6%KEVCVE-2020-3259HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityEPSS 71.5%KEVCVE-2024-20353HIGHCVE-2024-20353EPSS 69.8%KEVCVE-2023-20269MEDIUMCVE-2023-20269EPSS 26.6%KEVCVE-2024-20359MEDIUMCVE-2024-20359EPSS 18.8%KEV