CVE-2020-3564Medium· 5.3▾ SunlitA vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerabilit…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.3%
A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and successfully complete FTP connections.
adaptive_security_appliance < 9.6secure_firewall_threat_defense < 6.3.0.6secure_firewall_threat_defense >= 6.4.0, < 6.4.0.10secure_firewall_threat_defense >= 6.5.0, < 6.5.0.5secure_firewall_threat_defense >= 6.6.0, < 6.6.1adaptive_security_appliance_software >= 9.8.0, < 9.8.4.26adaptive_security_appliance_software >= 9.9.0, < 9.9.2.80adaptive_security_appliance_software >= 9.10.0, < 9.10.1.44adaptive_security_appliance_software >= 9.12.0, < 9.12.4.4adaptive_security_appliance_software >= 9.13.0, < 9.13.1.13adaptive_security_appliance_software >= 9.14.0, < 9.14.1.19Upgrade past the affected range:
adaptive_security_appliance 9.6secure_firewall_threat_defense 6.6.1adaptive_security_appliance_software 9.14.1.19Connected by shared product, vendor, weakness, or advisory.
CVE-2025-20131Medium· 4.9A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of…
CVE-2026-20192Critical· 10.0As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal securi…
CVE-2026-20332Critical· 9.9As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software en…
CVE-2026-20322Critical· 9.9As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review
CVE-2026-20121Medium· 5.3A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthen…
CVE-2026-20120Medium· 5.8A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthen…