CVE-2020-3191High· 8.6▾ TwilightA vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reloa…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 11.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.8%
1.8% → 1.9%
A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper length validation of a field in an IPv6 DNS packet. An attacker could exploit this vulnerability by sending a crafted DNS query over IPv6, which traverses the affected device. An exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. This vulnerability is specific to DNS over IPv6 traffic only.
secure_firewall_threat_defense >= 6.2.3, < 6.2.3.16secure_firewall_threat_defense >= 6.3.0, < 6.3.0.6secure_firewall_threat_defense >= 6.4.0, < 6.4.0.6asa_5505_firmware = 9.4(1)asa_5505_firmware = 96.4(0.42)asa_5510_firmware = 9.4(1)asa_5510_firmware = 96.4(0.42)asa_5512-x_firmware = 9.4(1)asa_5512-x_firmware = 96.4(0.42)asa_5515-x_firmware = 9.4(1)asa_5515-x_firmware = 96.4(0.42)asa_5520_firmware = 9.4(1)asa_5520_firmware = 96.4(0.42)asa_5525-x_firmware = 9.4(1)asa_5525-x_firmware = 96.4(0.42)asa_5540_firmware = 9.4(1)asa_5540_firmware = 96.4(0.42)asa_5545-x_firmware = 9.4(1)asa_5545-x_firmware = 96.4(0.42)asa_5550_firmware = 9.4(1)asa_5550_firmware = 96.4(0.42)asa_5555-x_firmware = 9.4(1)asa_5555-x_firmware = 96.4(0.42)asa_5580_firmware = 9.4(1)asa_5580_firmware = 96.4(0.42)asa_5585-x_firmware = 9.4(1)asa_5585-x_firmware = 96.4(0.42)adaptive_security_appliance_software >= 9.6, < 9.6.4.36adaptive_security_appliance_software >= 9.8, < 9.8.4.12adaptive_security_appliance_software >= 9.9, < 9.9.2.66adaptive_security_appliance_software >= 9.10, < 9.10.1.37adaptive_security_appliance_software >= 9.12, < 9.12.2.9Upgrade past the affected range:
secure_firewall_threat_defense 6.4.0.6adaptive_security_appliance_software 9.12.2.9Connected by shared product, vendor, weakness, or advisory.
CVE-2020-3577High· 7.4A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense (FTD) Software for interfaces that are configured either as Inline Pair or in Passive mode could allow an unauthenticated, adjacent attacker to cause…
CVE-2020-3317High· 7.5A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to crash Snort instances
CVE-2020-3166Medium· 6.7A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS)
CVE-2019-12694Medium· 6.7A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with …
CVE-2018-15454High· 8.6A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an …
CVE-2021-1448High· 7.8A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is …