The vulnerability of the Internet Key Exchange version 1 function in microprogramming-based network interface controllers from Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

🗓️ 02 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Internet Key Exchange version one vulnerability in Cisco appliances and defense interfaces causes remote service interruptions.

Reporter	Title	Published	Views	Family All 12
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability	6 May 202016:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software IKEv1 DoS (cisco-sa-asa-dos-BqYFRJt9)	14 May 202000:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software IKEv1 DoS (cisco-sa-asa-dos-BqYFRJt9)	14 May 202000:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software Web Services Information Disclosure (cisco-sa-asaftd-info-disclose-9eJtycMB)	19 Jun 202000:00	–	nessus
CNVD	Cisco Firepower Threat Defense and Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2020-31110)	7 May 202000:00	–	cnvd
CVE	CVE-2020-3303	6 May 202016:42	–	cve
Cvelist	CVE-2020-3303 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability	6 May 202016:42	–	cvelist
EUVD	EUVD-2020-24574	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3303	6 May 202017:15	–	nvd
Prion	Race condition	6 May 202017:15	–	prion

Vulners

Node

cisco_systems adaptive_security_applianceRange<9.6.4.34

OR

cisco_systems adaptive_security_applianceRange9.7–9.8.4.10

OR

cisco_systems adaptive_security_applianceRange9.12–9.12.2.9

OR

cisco_systems firepower_threat_defenseRange6.3.0–6.3.0.5

OR

cisco_systems firepower_threat_defenseRange6.4.0–6.4.0.7

OR

cisco_systems adaptive_security_applianceRange9.9–9.10.1.30

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-BqYFRJt9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3303
web	www.web.nvd.nist.gov/view/vuln/detail

02 Jun 2020 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 37.5

CVSS 27.8

EPSS0.01233

internet key exchange vulnerability remote service interruptions Cisco appliances defense interfaces resource exhaustion