CVE-2020-3298

CVE-2020-3298 affects Cisco ASA and Firepower Threat Defense (FTD) across ASA/FTD OSBF processing. The root cause is improper memory protection while handling certain OSPF packets, enabling an unauthenticated remote attacker to trigger a device reload and cause a DoS for traffic passing through t...

CVE-2020-3298 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First OSPF implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the reload of an affected device, resulting in a denial of service DoS...

CVE-2020-3259

CVE-2020-3259 is Cisco ASA/FTD Web Services Information Disclosure: an unauthenticated attacker could retrieve memory contents via crafted GET requests due to a buffer-tracking issue, with impact limited to specific AnyConnect/WebVPN configurations. Cisco and CVE listings confirm information disc...

CVE-2020-3254 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities

Multiple vulnerabilities in the Media Gateway Control Protocol MGCP inspection feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The...

CVE-2020-3254

The CVE-2020-3254 issue affects Cisco ASA and Firepower Threat Defense (FTD) software, specifically the Media Gateway Control Protocol (MGCP) inspection feature. The vulnerability arises from inefficient memory management in MGCP inspection, allowing an unauthenticated, remote attacker to send cr...

CVE-2020-3196 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust memory resources on the affected device, leading to a...

CVE-2020-3196

Cisco CVE-2020-3196 describes a memory exhaustion DoS in the SSL/TLS handler of ASA Software and FTD Software. An unauthenticated, remote attacker can open multiple SSL/TLS connections under certain conditions to exhaust device memory, causing the device to stop accepting new SSL/TLS connections ...

CVE-2020-3195

CVE-2020-3195 affects Cisco ASA and Firepower Threat Defense (FTD) software, via memory-leak in OSPF packet processing. An unauthenticated, remote attacker can send crafted OSPF packets to exhaust memory, potentially causing device reloads and DoS. Cisco advisories (Cisco-SA-ASA-FTD-OSPF-MEMLEAK-...

CVE-2020-3195 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability

A vulnerability in the Open Shortest Path First OSPF implementation in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to incorrect...

CVE-2020-3195 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability

A vulnerability in the Open Shortest Path First OSPF implementation in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to incorrect...

CVE-2020-3191

The CVE-2020-3191 issue affects Cisco ASA (Adaptive Security Appliance) and Cisco FTD (Firepower Threat Defense) software and is caused by improper length validation in fields of IPv6 DNS packets. The vulnerability allows an unauthenticated, remote attacker to trigger a device reload via a crafte...

CVE-2020-3191 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability

A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service DoS condition. The...

CVE-2020-3191 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability

A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service DoS condition. The...

CVE-2020-3187 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted...

CVE-2020-3187

Cisco ASA/FTD web services interface (Cisco ASA Software and Cisco Firepower Threat Defense) is vulnerable to CVE-2020-3187 via directory traversal. The authenticated or unauthenticated attacker can craft HTTP requests (e.g., to /+CSCOE+/session_password.html) to view and delete files within the ...

CVE-2020-3334 Cisco Firepower 2100 Series Security Appliances ARP Denial of Service Vulnerability

A vulnerability in the ARP packet processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 2100 Series Security Appliances could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in ...

CVE-2020-3334 Cisco Firepower 2100 Series Security Appliances ARP Denial of Service Vulnerability

A vulnerability in the ARP packet processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 2100 Series Security Appliances could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in ...

CVE-2020-3334

CVE-2020-3334 affects Cisco ASA and Firepower Threat Defense (FTD) running on Cisco Firepower 2100 Series. The issue is an ARP packet processing flaw on the management interface due to incorrect ARP data handling, which could allow an unauthenticated, adjacent attacker to send a burst of unicast ...

CVE-2020-3125 Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center KDC and bypass authentication on an affected device that is configured to perform Kerberos...

CVE-2020-3125 Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center KDC and bypass authentication on an affected device that is configured to perform Kerberos...