ID
VAR-202010-1050
CVE
CVE-2020-3554
TITLE
Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Resource depletion vulnerability in software
Trust: 0.8
sources:
JVNDB: JVNDB-2020-012599
DESCRIPTION
A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory exhaustion condition. An attacker could exploit this vulnerability by sending a high rate of crafted TCP traffic through an affected device. A successful exploit could allow the attacker to exhaust device resources, resulting in a DoS condition for traffic transiting the affected device. The platform provides features such as highly secure access to data and network resources
Trust: 1.8
sources:
NVD: CVE-2020-3554 //
JVNDB: JVNDB-2020-012599 //
VULHUB: VHN-181679 //
VULMON: CVE-2020-3554
AFFECTED PRODUCTS
| vendor: | cisco | model: | firepower threat defense | scope: | eq | version: | 6.6.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 6.5.0.5 | Trust: 1.0 |
| vendor: | cisco | model: | adaptive security appliance software | scope: | lt | version: | 9.13.1.13 | Trust: 1.0 |
| vendor: | cisco | model: | adaptive security appliance software | scope: | lt | version: | 9.14.1.30 | Trust: 1.0 |
| vendor: | cisco | model: | adaptive security appliance | scope: | lt | version: | 9.12.4.3 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lte | version: | 6.2.2 | Trust: 1.0 |
| vendor: | cisco | model: | adaptive security appliance software | scope: | gte | version: | 9.13.0 | Trust: 1.0 |
| vendor: | cisco | model: | adaptive security appliance software | scope: | gte | version: | 9.14.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 6.3.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 6.5.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 6.4.0.10 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco adaptive security appliance ソフトウェア | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco firepower threat defense ソフトウェア | scope: | - | version: | - | Trust: 0.8 |
sources:
JVNDB: JVNDB-2020-012599 //
NVD: CVE-2020-3554
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
sources:
VULHUB: VHN-181679 //
VULMON: CVE-2020-3554 //
JVNDB: JVNDB-2020-012599 //
CNNVD: CNNVD-202010-1163 //
NVD: CVE-2020-3554 //
NVD: CVE-2020-3554
PROBLEMTYPE DATA
| problemtype: | CWE-400 | Trust: 1.1 |
| problemtype: | Resource exhaustion (CWE-400) [NVD Evaluation ] | Trust: 0.8 |
sources:
VULHUB: VHN-181679 //
JVNDB: JVNDB-2020-012599 //
NVD: CVE-2020-3554
THREAT TYPE
remote
Trust: 0.6
sources:
CNNVD: CNNVD-202010-1163
TYPE
resource management error
Trust: 0.6
sources:
CNNVD: CNNVD-202010-1163
PATCH
| title: | cisco-sa-asaftd-dos-QFcNEPfx | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-QFcNEPfx | Trust: 0.8 |
sources:
JVNDB: JVNDB-2020-012599
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-3554 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2020-012599 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202010-1163 | Trust: 0.7 |
| db: | AUSCERT | id: | ESB-2020.3642.3 | Trust: 0.6 |
| db: | AUSCERT | id: | ESB-2020.3642 | Trust: 0.6 |
| db: | NSFOCUS | id: | 50230 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-181679 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2020-3554 | Trust: 0.1 |
sources:
VULHUB: VHN-181679 //
VULMON: CVE-2020-3554 //
JVNDB: JVNDB-2020-012599 //
CNNVD: CNNVD-202010-1163 //
NVD: CVE-2020-3554
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-asaftd-dos-qfcnepfx | Trust: 2.4 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-3554 | Trust: 1.4 |
| url: | https://vigilance.fr/vulnerability/cisco-asa-software-memory-leak-via-tcp-packet-33666 | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2020.3642.3 | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2020.3642/ | Trust: 0.6 |
| url: | http://www.nsfocus.net/vulndb/50230 | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/400.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
sources:
VULHUB: VHN-181679 //
VULMON: CVE-2020-3554 //
JVNDB: JVNDB-2020-012599 //
CNNVD: CNNVD-202010-1163 //
NVD: CVE-2020-3554
SOURCES
| db: | VULHUB | id: | VHN-181679 |
| db: | VULMON | id: | CVE-2020-3554 |
| db: | JVNDB | id: | JVNDB-2020-012599 |
| db: | CNNVD | id: | CNNVD-202010-1163 |
| db: | NVD | id: | CVE-2020-3554 |
LAST UPDATE DATE
2024-08-14T13:54:28.338000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-181679 | date: | 2020-10-27T00:00:00 |
| db: | VULMON | id: | CVE-2020-3554 | date: | 2020-10-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-012599 | date: | 2021-05-14T08:19:00 |
| db: | CNNVD | id: | CNNVD-202010-1163 | date: | 2021-06-30T00:00:00 |
| db: | NVD | id: | CVE-2020-3554 | date: | 2023-08-16T16:17:07.960 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-181679 | date: | 2020-10-21T00:00:00 |
| db: | VULMON | id: | CVE-2020-3554 | date: | 2020-10-21T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-012599 | date: | 2021-05-14T00:00:00 |
| db: | CNNVD | id: | CNNVD-202010-1163 | date: | 2020-10-21T00:00:00 |
| db: | NVD | id: | CVE-2020-3554 | date: | 2020-10-21T19:15:17.420 |