← Back

CVE-2020-3554

nvd nist
Published: Oct 21, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory exhaustion condition. An attacker could exploit this vulnerability by sending a high rate of crafted TCP traffic through an affected device. A successful exploit could allow the attacker to exhaust device resources, resulting in a DoS condition for traffic transiting the affected device.

Affected (7)

3 products
Adaptive Security Appliance
Firepower Threat Defense
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Before 9.12.4.3
Cisco
From 9.13.0 to 9.13.1.13
From 9.14.0 to 9.14.1.30
Cisco
Up to 6.2.2
From 6.3.0 to 6.4.0.10
From 6.5.0 to 6.5.0.5
Version 6.6.0

Timeline

No history available yet.