csirt@kutim:~/threat-intel/cve/CVE-2026-20022

Katalog CVE

CVSS 6.5 · Medium EPSS 0,20%

Kerentanan Use of Out-of-range Pointer Offset pada cisco adaptive security appliance software. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the command debug ip ospf canon. This vulnerability is due to insufficient input validation when processing OSPF LSU packets. An attacker could exploit this vulnerability by sending crafted unauthenticated OSPF packets. A successful exploit could allow the attacker to write to memory outside of the packet data, causing the device to reload, resulting in a DoS condition.

Rincian

Terbit di NVD
4 Maret 2026
Terakhir diubah
11 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-823: Use of Out-of-range Pointer Offset
EPSS (30 hari)
0,20% peluang dieksploitasi; lebih tinggi dari 9,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco adaptive security appliance software Versi 9.12.1
cisco adaptive security appliance software Versi 9.12.1.2
cisco adaptive security appliance software Versi 9.12.1.3
cisco adaptive security appliance software Versi 9.12.2
cisco adaptive security appliance software Versi 9.12.2.1
cisco adaptive security appliance software Versi 9.12.2.4
cisco adaptive security appliance software Versi 9.12.2.5
cisco adaptive security appliance software Versi 9.12.2.9
cisco adaptive security appliance software Versi 9.12.3
cisco adaptive security appliance software Versi 9.12.3.2
cisco adaptive security appliance software Versi 9.12.3.7
cisco adaptive security appliance software Versi 9.12.3.9
cisco adaptive security appliance software Versi 9.12.3.12
cisco adaptive security appliance software Versi 9.12.4
cisco adaptive security appliance software Versi 9.12.4.2
cisco adaptive security appliance software Versi 9.12.4.4
cisco adaptive security appliance software Versi 9.12.4.7
cisco adaptive security appliance software Versi 9.12.4.8
cisco adaptive security appliance software Versi 9.12.4.10
cisco adaptive security appliance software Versi 9.12.4.13
cisco adaptive security appliance software Versi 9.12.4.18
cisco adaptive security appliance software Versi 9.12.4.24
cisco adaptive security appliance software Versi 9.12.4.26
cisco adaptive security appliance software Versi 9.12.4.29
cisco adaptive security appliance software Versi 9.12.4.30
cisco adaptive security appliance software Versi 9.12.4.35
cisco adaptive security appliance software Versi 9.12.4.37
cisco adaptive security appliance software Versi 9.12.4.38
cisco adaptive security appliance software Versi 9.12.4.39
cisco adaptive security appliance software Versi 9.12.4.40
cisco adaptive security appliance software Versi 9.12.4.41
cisco adaptive security appliance software Versi 9.12.4.47
cisco adaptive security appliance software Versi 9.12.4.48
cisco adaptive security appliance software Versi 9.12.4.50
cisco adaptive security appliance software Versi 9.12.4.52
cisco adaptive security appliance software Versi 9.12.4.54
cisco adaptive security appliance software Versi 9.12.4.55
cisco adaptive security appliance software Versi 9.12.4.56
cisco adaptive security appliance software Versi 9.12.4.58
cisco adaptive security appliance software Versi 9.12.4.62
cisco adaptive security appliance software Versi 9.12.4.65
cisco adaptive security appliance software Versi 9.12.4.67
cisco adaptive security appliance software Versi 9.16.1
cisco adaptive security appliance software Versi 9.16.1.28
cisco adaptive security appliance software Versi 9.16.2
cisco adaptive security appliance software Versi 9.16.2.3
cisco adaptive security appliance software Versi 9.16.2.7
cisco adaptive security appliance software Versi 9.16.2.11
cisco adaptive security appliance software Versi 9.16.2.13
cisco adaptive security appliance software Versi 9.16.2.14
cisco adaptive security appliance software Versi 9.16.3
cisco adaptive security appliance software Versi 9.16.3.3
cisco adaptive security appliance software Versi 9.16.3.14
cisco adaptive security appliance software Versi 9.16.3.15
cisco adaptive security appliance software Versi 9.16.3.19
cisco adaptive security appliance software Versi 9.16.3.23
cisco adaptive security appliance software Versi 9.16.4
cisco adaptive security appliance software Versi 9.16.4.9
cisco adaptive security appliance software Versi 9.16.4.14
cisco adaptive security appliance software Versi 9.16.4.19

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 239 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.