The vulnerability in the web interface of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a perpetrator to trigger a system reboot.

🗓️ 10 Nov 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

A vulnerability in Cisco ASA and Firepower Threat Defense web interfaces lets an attacker reboot by downloading files in directories.

Reporter	Title	Published	Views	Family All 13
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability	21 Oct 202016:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software Web Services File Upload DoS (cisco-sa-asaftd-fileup-dos-zvC7wtys)	19 Aug 202100:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software Web Services File Upload DoS (cisco-sa-asaftd-fileup-dos-zvC7wtys)	19 Aug 202100:00	–	nessus
CNVD	Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Denial of Service Vulnerability (CNVD-2021-44682)	4 Nov 202000:00	–	cnvd
CVE	CVE-2020-3436	21 Oct 202018:36	–	cve
Cvelist	CVE-2020-3436 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability	21 Oct 202018:36	–	cvelist
EUVD	EUVD-2020-24707	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco ASA and FTD	22 Oct 202000:00	–	ncsc
NVD	CVE-2020-3436	21 Oct 202019:15	–	nvd
OSV	CVE-2020-3436	21 Oct 202019:15	–	osv

Vulners

Node

cisco_systems firepower_threat_defenseRange6.5.0–6.5.0.5

OR

cisco_systems firepower_threat_defenseRange6.4.0–6.4.0.10

OR

cisco_systems firepower_threat_defenseRange6.6.0–6.6.1

OR

cisco_systems adaptive_security_applianceRange9.9–9.9.2.80

OR

cisco_systems adaptive_security_applianceRange9.10–9.10.1.44

OR

cisco_systems adaptive_security_applianceRange9.13–9.13.1.12

OR

cisco_systems adaptive_security_applianceRange<9.6.4.45

OR

cisco_systems adaptive_security_applianceRange9.12–9.12.4.2

OR

cisco_systems adaptive_security_applianceRange9.14–9.14.1.15

OR

cisco_systems adaptive_security_applianceRange9.7–9.8.4.25

OR

cisco_systems firepower_threat_defenseRange6.2.2–6.3.0.6

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-fileup-dos-zvC7wtys
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3436
web	www.web.nvd.nist.gov/view/vuln/detail

10 Nov 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 27.8

CVSS 38.6

EPSS0.01895

Cisco Adaptive Security Firepower Threat Defense web interface vulnerability file download restriction system reboot trigger