CVE-2020-3308

Cisco Firepower Threat Defense (FTD) Software is vulnerable in its Image Signature Verification feature. The root cause is improper verification of digital signatures for patch images, enabling an authenticated, remote attacker with administrator-level credentials to craft and load an unsigned pa...

CVE-2020-3306 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability

A vulnerability in the DHCP module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to incorrect processing ...

CVE-2020-3306

CVE-2020-3306 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) DHCP module. The root cause is incorrect processing of certain DHCP packets, which an unauthenticated remote attacker can exploit by sending a crafted DHCP packet to cause an on-device denial of service. Public docu...

CVE-2020-3305

The CVE-2020-3305 issue affects Cisco ASA and Firepower Threat Defense (FTD) where the BGP module incorrectly processes certain BGP packets. An unauthenticated, remote attacker can craft BGP traffic to trigger a denial of service on the affected device. Multiple connected documents corroborate a ...

CVE-2020-3305 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP module in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to...

CVE-2020-3303

The CVE-2020-3303 issue affects Cisco ASA (Adaptive Security Appliance) and Cisco FTD (Firepower Threat Defense) software, arising from improper memory management in the IKEv1 feature. An unauthenticated, remote attacker can send crafted IKEv1 traffic to trigger a denial-of-service on affected de...

CVE-2020-3303 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 1 IKEv1 feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper...

CVE-2020-3298

CVE-2020-3298 affects Cisco ASA and Firepower Threat Defense (FTD) across ASA/FTD OSBF processing. The root cause is improper memory protection while handling certain OSPF packets, enabling an unauthenticated remote attacker to trigger a device reload and cause a DoS for traffic passing through t...

CVE-2020-3298 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First OSPF implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the reload of an affected device, resulting in a denial of service DoS...

CVE-2020-3285

Cisco Firepower Threat Defense Software TLS 1.3 URL category bypass vulnerability (CVE-2020-3285) arises from a Snort handling logic error. An unauthenticated, remote attacker could bypass the TLS 1.3 policy to access URLs that should be dropped. Affected product: FTD software with TLS policy URL...

CVE-2020-3283

CVE-2020-3283 affects Cisco Firepower Threat Defense (FTD) on the 1000 Series. The vulnerability resides in the SSL/TLS handler and stems from a communication error between internal functions, which can be exploited by an unauthenticated remote attacker sending a crafted SSL/TLS message to trigge...

CVE-2020-3283 Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco Firepower Threat Defense FTD Software when running on the Cisco Firepower 1000 Series platform could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected...

CVE-2020-3259

CVE-2020-3259 is Cisco ASA/FTD Web Services Information Disclosure: an unauthenticated attacker could retrieve memory contents via crafted GET requests due to a buffer-tracking issue, with impact limited to specific AnyConnect/WebVPN configurations. Cisco and CVE listings confirm information disc...

CVE-2020-3255

Cisco Firepower Threat Defense (FTD) Software contains a DoS vulnerability in the packet processing path caused by inefficient memory management. A remote, unauthenticated attacker can send a high rate of IPv4/IPv6 traffic that matches an ACL block action, triggering memory exhaustion and DoS for...

CVE-2020-3254 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities

Multiple vulnerabilities in the Media Gateway Control Protocol MGCP inspection feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The...

CVE-2020-3254

The CVE-2020-3254 issue affects Cisco ASA and Firepower Threat Defense (FTD) software, specifically the Media Gateway Control Protocol (MGCP) inspection feature. The vulnerability arises from inefficient memory management in MGCP inspection, allowing an unauthenticated, remote attacker to send cr...

CVE-2020-3253

Cisco Firepower Threat Defense (FTD) Software contains a shell access vulnerability in the support tunnel feature. An authenticated, local attacker can enable the support tunnel, set a key, and derive the tunnel password to execute arbitrary commands with root privileges, even when expert mode is...

CVE-2020-3196

Cisco CVE-2020-3196 describes a memory exhaustion DoS in the SSL/TLS handler of ASA Software and FTD Software. An unauthenticated, remote attacker can open multiple SSL/TLS connections under certain conditions to exhaust device memory, causing the device to stop accepting new SSL/TLS connections ...

CVE-2020-3195 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability

A vulnerability in the Open Shortest Path First OSPF implementation in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to incorrect...

CVE-2020-3195

CVE-2020-3195 affects Cisco ASA and Firepower Threat Defense (FTD) software, via memory-leak in OSPF packet processing. An unauthenticated, remote attacker can send crafted OSPF packets to exhaust memory, potentially causing device reloads and DoS. Cisco advisories (Cisco-SA-ASA-FTD-OSPF-MEMLEAK-...