The vulnerability of the implementation of the OSPFv2 protocol in microprogrammed network interface devices from Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows a attacker to induce a service failure.

🗓️ 10 Nov 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Open Shortest Path First protocol in Cisco Adaptive Security Appliances and Firepower Defense enables remote resource exhaustion and service interruption.

Reporter	Title	Published	Views	Family All 12
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability	21 Oct 202016:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software OSPFv2 Link-Local Signaling DoS (cisco-sa-asaftd-ospflls-37Xy2q6r)	19 Aug 202100:00	–	nessus
Tenable Nessus	Cisco Adaptive Security Appliance Software OSPFv2 Link-Local Signaling DoS (cisco-sa-asaftd-ospflls-37Xy2q6r)	19 Aug 202100:00	–	nessus
CVE	CVE-2020-3528	21 Oct 202018:35	–	cve
Cvelist	CVE-2020-3528 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability	21 Oct 202018:35	–	cvelist
EUVD	EUVD-2020-24799	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco ASA and FTD	22 Oct 202000:00	–	ncsc
NVD	CVE-2020-3528	21 Oct 202019:15	–	nvd
Prion	Input validation	21 Oct 202019:15	–	prion
Positive Technologies	PT-2020-4460 · Cisco · Cisco Ftd +1	21 Oct 202000:00	–	ptsecurity

Vulners

Node

cisco_systems firepower_threat_defenseRange6.5.0–6.5.0.5

OR

cisco_systems firepower_threat_defenseRange6.4.0–6.4.0.10

OR

cisco_systems firepower_threat_defenseRange6.6.0–6.6.1

OR

cisco_systems adaptive_security_applianceRange9.7–9.8.4.22

OR

cisco_systems adaptive_security_applianceRange9.9–9.9.2.80

OR

cisco_systems adaptive_security_applianceRange9.10–9.10.1.44

OR

cisco_systems adaptive_security_applianceRange9.13–9.13.1.12

OR

cisco_systems adaptive_security_applianceRange<9.6.4.45

OR

cisco_systems adaptive_security_applianceRange9.12–9.12.4.2

OR

cisco_systems adaptive_security_applianceRange9.14–9.14.1.15

OR

cisco_systems firepower_threat_defenseRange6.2.2–6.3.0.6

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospflls-37Xy2q6r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3528
web	www.web.nvd.nist.gov/view/vuln/detail

10 Nov 2020 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 27.8

CVSS 38.6

EPSS0.01415

open shortest path first cisco adaptive security appliances firepower defense remote resource exhaustion service interruption