CVE-2020-3564
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and successfully complete FTP connections.
Una vulnerabilidad en el motor de inspección FTP de Cisco Adaptive Security Appliance (ASA) Software y Cisco Firepower Threat Defense (FTD) Software, podría permitir a un atacante remoto no autenticado omitir la inspección FTP. La vulnerabilidad es debido a un seguimiento de flujo ineficiente del tráfico FTP. Un atacante podría explotar esta vulnerabilidad mediante el envío de tráfico FTP diseñado por medio de un dispositivo afectado. Una explotación con éxito podría permitir a un atacante omitir la inspección de FTP y completar con éxito las conexiones FTP
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2019-12-12 CVE Reserved
- 2020-10-21 CVE Published
- 2023-07-07 EPSS Updated
- 2024-11-13 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
- CWE-436: Interpretation Conflict
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Adaptive Security Appliance Search vendor "Cisco" for product "Adaptive Security Appliance" | < 9.6 Search vendor "Cisco" for product "Adaptive Security Appliance" and version " < 9.6" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | < 6.3.0.6 Search vendor "Cisco" for product "Firepower Threat Defense" and version " < 6.3.0.6" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.4.0 < 6.4.0.10 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.4.0 < 6.4.0.10" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.5.0 < 6.5.0.5 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.5.0 < 6.5.0.5" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.6.0 < 6.6.1 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.6.0 < 6.6.1" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8.0 < 9.8.4.26 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8.0 < 9.8.4.26" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9.0 < 9.9.2.80 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9.0 < 9.9.2.80" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10.0 < 9.10.1.44 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10.0 < 9.10.1.44" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.12.0 < 9.12.4.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.12.0 < 9.12.4.4" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.13.0 < 9.13.1.13 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.13.0 < 9.13.1.13" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.14.0 < 9.14.1.19 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.14.0 < 9.14.1.19" | - |
Affected
|