Lucene search

CVE-2020-3452

🗓️ 22 Jul 2020 20:11:15Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 1373 Views🌐 47 Media mentions

A vulnerability in Cisco ASA and FTD Software allows remote attackers to conduct directory traversal attacks and read sensitive file

Reporter	Title	Published	Views	Family All 65
0day.today	Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion Exploit	29 Jul 202000:00	–	zdt
0day.today	Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion Exploit	30 Jul 202000:00	–	zdt
Packet Storm	Cisco Adaptive Security Appliance Software 9.11 Local File Inclusion	29 Jul 202000:00	–	packetstorm
Packet Storm	Cisco ASA / FTD 9.6.4.42 Path Traversal	11 Oct 202000:00	–	packetstorm
Packet Storm	Cisco ASA 9.14.1.10 / FTD 6.6.0.1 Path Traversal	15 Dec 202000:00	–	packetstorm
Packet Storm	Cisco Adaptive Security Appliance Software 9.7 Arbitrary File Deletion	29 Jul 202000:00	–	packetstorm
Hacker One	U.S. Dept Of Defense: CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower.	5 Aug 202010:21	–	hackerone
Hacker One	U.S. Dept Of Defense: ███ is vulnerable to CVE-2020-3452 Read-Only Path Traversal Vulnerability	15 Aug 202002:08	–	hackerone
Hacker One	U.S. Dept Of Defense: https://████ is vulnerable to cve-2020-3452	5 Oct 202022:03	–	hackerone
Hacker One	U.S. Dept Of Defense: CVE-2020-3452 on https://█████/	20 Jan 202213:53	–	hackerone

Nvd

Vulners

Node

cisco adaptive_security_appliance_softwareRange9.6–9.6.4.42

cisco adaptive_security_appliance_softwareRange9.8–9.8.4.20

cisco adaptive_security_appliance_softwareRange9.9–9.9.2.74

cisco adaptive_security_appliance_softwareRange9.10–9.10.1.42

cisco adaptive_security_appliance_softwareRange9.12–9.12.3.12

cisco adaptive_security_appliance_softwareRange9.13–9.13.1.10

cisco adaptive_security_appliance_softwareRange9.14–9.14.1.10

AND

cisco asa_5505Match-

cisco asa_5510Match-

cisco asa_5512-xMatch-

cisco asa_5515-xMatch-

cisco asa_5520Match-

cisco asa_5525-xMatch-

cisco asa_5540Match-

cisco asa_5545-xMatch-

cisco asa_5550Match-

cisco asa_5555-xMatch-

cisco asa_5580Match-

cisco asa_5585-xMatch-

Node

cisco firepower_threat_defenseRange6.2.3–6.2.3.16

cisco firepower_threat_defenseRange6.3.0–6.3.0.6

cisco firepower_threat_defenseRange6.4.0–6.4.0.10

cisco firepower_threat_defenseRange6.5.0–6.5.0.5

cisco firepower_threat_defenseRange6.6.0–6.6.0.1

[
  {
    "product": "Cisco Adaptive Security Appliance (ASA) Software",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "9.6.4.42",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.8.4.20",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.9.2.74",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.10.1.42",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.13.1.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.14.1.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160497/Cisco-ASA-9.14.1.10-FTD-6.6.0.1-Path-Traversal.html
packetstormsecurity	www.packetstormsecurity.com/files/158647/Cisco-Adaptive-Security-Appliance-Software-9.11-Local-File-Inclusion.html
packetstormsecurity	www.packetstormsecurity.com/files/158646/Cisco-ASA-FTD-Remote-File-Disclosure.html
packetstormsecurity	www.packetstormsecurity.com/files/159523/Cisco-ASA-FTD-9.6.4.42-Path-Traversal.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ro-path-KJuQhB86

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Jul 2020 20:15Current

7.5High risk

Vulners AI Score7.5

CVSS25

CVSS37.5

EPSS0.975

cve-2020-3452 cisco asa ftd vulnerability web services directory traversal remote attacker http request input validation nvd