CVE-2020-3259

cisco secure firewall threat defense, cisco adaptive security appliance software

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-3259

Katalog CVE

CVSS 7.5 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 71,8%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada cisco secure firewall threat defense, cisco adaptive security appliance software. Skor CVSS 3.1 7.5 (High) menurut NVD. Masuk katalog KEV CISA pada 15 Februari 2024, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. An attacker could exploit this vulnerability by sending a crafted GET request to the web services interface. A successful exploit could allow the attacker to retrieve memory contents, which could lead to the disclosure of confidential information. Note: This vulnerability affects only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section.

Rincian

Terbit di NVD
6 Mei 2020
Terakhir diubah
12 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EPSS (30 hari)
71,8% peluang dieksploitasi; lebih tinggi dari 99,4% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama
Cisco ASA and FTD Information Disclosure Vulnerability
Masuk KEV
15 Februari 2024
Tenggat CISA
7 Maret 2024 (untuk instansi federal AS)
Ransomware
Tercatat dipakai dalam kampanye ransomware
Tindakan wajib
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco secure firewall threat defense Versi 6.2.3 hingga sebelum 6.2.3.16
cisco secure firewall threat defense Versi 6.3.0 hingga sebelum 6.3.0.6
cisco secure firewall threat defense Versi 6.4.0 hingga sebelum 6.4.0.9
cisco secure firewall threat defense Versi 6.5.0 hingga sebelum 6.5.0.5
cisco adaptive security appliance software Versi 9.8 hingga sebelum 9.8.4.20
cisco adaptive security appliance software Versi 9.9 hingga sebelum 9.9.2.67
cisco adaptive security appliance software Versi 9.10 hingga sebelum 9.10.1.40
cisco adaptive security appliance software Versi 9.12 hingga sebelum 9.12.3.9
cisco adaptive security appliance software Versi 9.13 hingga sebelum 9.13.1.10

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.