CVE-2020-3125

cisco asa 5505 firmware, cisco asa 5510 firmware, cisco asa 5512-x firmware +10 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-3125

Katalog CVE

CVSS 9.8 · Critical EPSS 2,4%

Kerentanan Improper Authentication pada cisco asa 5505 firmware, cisco asa 5510 firmware +11 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured to perform Kerberos authentication for VPN or local device access. The vulnerability is due to insufficient identity verification of the KDC when a successful authentication response is received. An attacker could exploit this vulnerability by spoofing the KDC server response to the ASA device. This malicious response would not have been authenticated by the KDC. A successful attack could allow an attacker to bypass Kerberos authentication.

Rincian

Terbit di NVD
6 Mei 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-287: Improper Authentication
EPSS (30 hari)
2,4% peluang dieksploitasi; lebih tinggi dari 83,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco asa 5505 firmware Versi 9.10(1.220)
cisco asa 5510 firmware Versi 9.10(1.220)
cisco asa 5512-x firmware Versi 9.10(1.220)
cisco asa 5515-x firmware Versi 9.10(1.220)
cisco asa 5520 firmware Versi 9.10(1.220)
cisco asa 5525-x firmware Versi 9.10(1.220)
cisco asa 5540 firmware Versi 9.10(1.220)
cisco asa 5545-x firmware Versi 9.10(1.220)
cisco asa 5550 firmware Versi 9.10(1.220)
cisco asa 5555-x firmware Versi 9.10(1.220)
cisco asa 5580 firmware Versi 9.10(1.220)
cisco asa 5585-x firmware Versi 9.10(1.220)
cisco adaptive security appliance software Versi 9.8 hingga sebelum 9.8.4.15
cisco adaptive security appliance software Versi 9.9 hingga sebelum 9.9.2.66
cisco adaptive security appliance software Versi 9.10 hingga sebelum 9.10.1.37
cisco adaptive security appliance software Versi 9.12 hingga sebelum 9.12.3.2
cisco adaptive security appliance software Versi 9.13 hingga sebelum 9.13.1.7

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.