CVE-2020-3452

CVE-2020-3452 CISCO デバイス上の CVE-2020-3452 のための小さな愚かな Python バリデータ?です。Python は初めてなので、殺さないでください。 ;- 使い方 root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt 免責事項: このスクリプトは、自分が所有しているか、テストする許可を得ている対象に対してのみ使用してください。違法な目的で使用しないでください！ CVE-2020-3452 に関する情報 ドキュメントを参照:...

CVE-2020-3452

CVE-2020-3452 Cisco Adaptive Security Appliance ASA & Cisco Firepower Threat Defense FTD Web服务只读目录遍历 Cisco Adaptive Security Appliance ASA 软件和 Cisco Firepower Threat Defense FTD 软件的 Web 服务接口存在一个漏洞，可能允许未经身份验证的远程攻击者执行目录遍历攻击并读取目标系统上的敏感文件。 该漏洞是由于受影响设备在处理 HTTP 请求时，对 URL...

CVE-2020-3452

CVE-2020-3452 Cisco Adaptive Security Appliance ASA 및 Cisco Firepower Threat Defense FTD 어플라이언스 웹 인터페이스의 디렉토리 탐색 취약점을 악용하기 위한 WIP 파이썬 스크립트입니다. 지정된 대상에 대해 디렉토리가 생성되며, 다운로드된 파일은 각각의 디렉토리에 저장됩니다. 또한 로깅 기능이 제공됩니다...

Cisco-ASA-FTD-Web-Services-Traversal

Cisco Adaptive Security Appliance Software 및 Firepower Threat Defense Software 웹 서비스 경로 탐색 취약점 CVE-2020-3452 사용법: CVE-2020-3452.py https://target 취약점 설명: Cisco Adaptive Security Appliance ASA Software 및 Cisco Firepower Threat Defense FTD Software의 웹 서비스 인터페이스에서 취약점으로 인해 인증되지 않은 원격 공격자가 디렉토리 탐색 공격...

cisco-security-research

Cisco セキュリティリサーチ 研究者: 0xReadingSteiner 連絡先: [email protected] ベンダー: Cisco Systems, Inc. ベンダー通知日: 2026-08-04 Cisco PSIRT、ZDI、SSD ベンダー応答: なし 存在理由 市販の Cisco 製品を対象とした独立したセキュリティリサーチにより、複数の製品ラインにわたる重大な脆弱性が特定されました。これには、企業が音声通信、コラボレーション、ネットワークセキュリティで依存しているシステムも含まれます。 公開前に行われた複数の調整の試み: 17 件の提出 を Zero...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Cisco ASA および FTD の未承認リモートファイル読み取り Nmap NSE スクリプト...

CVE-2018-0296

Cisco自适应安全设备 - 路径遍历 CVE-2018-0296 作者: Yassine Aboukir 在Cisco ASA中发现的一个安全漏洞，允许攻击者通过目录遍历技术，在无需认证的情况下查看敏感系统信息。 受影响产品 该漏洞影响运行在以下Cisco产品上的Cisco ASA软件和Cisco Firepower威胁防御（FTD）软件： root@kitploit: 3000 Series Industrial Security Appliance ISA ASA 1000V Cloud Firewall ASA 5500 Series Adaptive Security...

Cisco Firewall Threat Defense (FTD) Software Remote Access SSL VPN DoS (cisco-sa-asaftd-vpn-dos-dzv4mQFF)

According to its self-reported version, the Cisco Secure Firewall Threat Defense FTD Software is affected by a denial of service vulnerability. A flaw exists due to insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can exploit this issue, via a crafted...

The vulnerability of the Remote Access SSL VPN microprogramming network interface device of Cisco Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the Remote Access SSL VPN microprogramming network interface device of Cisco Adaptive Security Appliance ASA and Cisco Secure Firewall Threat Defense FTD is related to improper cleaning of dynamic memory. Exploiting this vulnerability allows a malicious actor to cause service...

CVE-2026-20349

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

CVE-2026-20349

The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...

CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

Cisco ASA and FTD Insufficient Verification of Data Authenticity (CVE-2022-20795)

A vulnerability in the implementation of the Datagram TLS DTLS protocol in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resulting in a denial of service DoS condition...

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco Secure Firewall Adaptive Security Appliance ASA and Secure Firewall Threat Defense FTD contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

VulnCheck KEV: CVE-2026-20349

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

PT-2026-70366

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA affected versions not specified Cisco Secure Firewall Threat Defense FTD affected versions not specified Description Insufficient error checking when processing HTTP requests in the Remote...

Cisco Firepower Threat Defense (FTD) Software VPN DoS Vulnerabilities (cisco-sa-asaftd-vpn-m9sx6MbC)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the Lua interpreter of the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure...

CVE-2026-20012

A vulnerability in the Internet Key Exchange version 2 IKEv2 feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance ASA Software, and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a...

CVE-2026-20050

A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...