csirt@kutim:~/threat-intel/cve/CVE-2026-20020

Katalog CVE

CVSS 5.7 · Medium EPSS 0,26%

Kerentanan Improper Input Validation pada cisco adaptive security appliance software. Skor CVSS 3.1 5.7 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. If OSPF authentication is enabled, the attacker must know the secret key to exploit this vulnerability. This vulnerability is due to insufficient input validation when processing OSPF update packets. An attacker could exploit this vulnerability by sending crafted OSPF update packets. A successful exploit could allow the attacker to create a buffer overflow, causing the affected device to reload, resulting in a DoS condition.

Rincian

Terbit di NVD
4 Maret 2026
Terakhir diubah
11 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
5.7 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
0,26% peluang dieksploitasi; lebih tinggi dari 16,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco adaptive security appliance software Versi 9.12.1
cisco adaptive security appliance software Versi 9.12.1.2
cisco adaptive security appliance software Versi 9.12.1.3
cisco adaptive security appliance software Versi 9.12.2
cisco adaptive security appliance software Versi 9.12.2.1
cisco adaptive security appliance software Versi 9.12.2.4
cisco adaptive security appliance software Versi 9.12.2.5
cisco adaptive security appliance software Versi 9.12.2.9
cisco adaptive security appliance software Versi 9.12.3
cisco adaptive security appliance software Versi 9.12.3.2
cisco adaptive security appliance software Versi 9.12.3.7
cisco adaptive security appliance software Versi 9.12.3.9
cisco adaptive security appliance software Versi 9.12.3.12
cisco adaptive security appliance software Versi 9.12.4
cisco adaptive security appliance software Versi 9.12.4.2
cisco adaptive security appliance software Versi 9.12.4.4
cisco adaptive security appliance software Versi 9.12.4.7
cisco adaptive security appliance software Versi 9.12.4.8
cisco adaptive security appliance software Versi 9.12.4.10
cisco adaptive security appliance software Versi 9.12.4.13
cisco adaptive security appliance software Versi 9.12.4.18
cisco adaptive security appliance software Versi 9.12.4.24
cisco adaptive security appliance software Versi 9.12.4.26
cisco adaptive security appliance software Versi 9.12.4.29
cisco adaptive security appliance software Versi 9.12.4.30
cisco adaptive security appliance software Versi 9.12.4.35
cisco adaptive security appliance software Versi 9.12.4.37
cisco adaptive security appliance software Versi 9.12.4.38
cisco adaptive security appliance software Versi 9.12.4.39
cisco adaptive security appliance software Versi 9.12.4.40
cisco adaptive security appliance software Versi 9.12.4.41
cisco adaptive security appliance software Versi 9.12.4.47
cisco adaptive security appliance software Versi 9.12.4.48
cisco adaptive security appliance software Versi 9.12.4.50
cisco adaptive security appliance software Versi 9.12.4.52
cisco adaptive security appliance software Versi 9.12.4.54
cisco adaptive security appliance software Versi 9.12.4.55
cisco adaptive security appliance software Versi 9.12.4.56
cisco adaptive security appliance software Versi 9.12.4.58
cisco adaptive security appliance software Versi 9.12.4.62
cisco adaptive security appliance software Versi 9.12.4.65
cisco adaptive security appliance software Versi 9.12.4.67
cisco adaptive security appliance software Versi 9.16.1
cisco adaptive security appliance software Versi 9.16.1.28
cisco adaptive security appliance software Versi 9.16.2
cisco adaptive security appliance software Versi 9.16.2.3
cisco adaptive security appliance software Versi 9.16.2.7
cisco adaptive security appliance software Versi 9.16.2.11
cisco adaptive security appliance software Versi 9.16.2.13
cisco adaptive security appliance software Versi 9.16.2.14
cisco adaptive security appliance software Versi 9.16.3
cisco adaptive security appliance software Versi 9.16.3.3
cisco adaptive security appliance software Versi 9.16.3.14
cisco adaptive security appliance software Versi 9.16.3.15
cisco adaptive security appliance software Versi 9.16.3.19
cisco adaptive security appliance software Versi 9.16.3.23
cisco adaptive security appliance software Versi 9.16.4
cisco adaptive security appliance software Versi 9.16.4.9
cisco adaptive security appliance software Versi 9.16.4.14
cisco adaptive security appliance software Versi 9.16.4.19

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 221 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.