CVE-2020-3189

CWE-400 — Uncontrolled Resource ConsumptionCWE-401 — Memory Leak4 documents4 sources
Severity
8.6HIGH
EPSS
1.3%
top 20.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
14
Cisco Cisco Firepower Threat Defense SoftwareCisco ASA 5505 FirmwareCisco ASA 5510 Firmware+11 more
Timeline
PublishedMay 6
Latest updateMay 24

Description

A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system memory over time, which can cause unexpected system behaviors or device crashes. The vulnerability is due to the system memory not being properly freed for a VPN System Logging event generated when a VPN session is created or deleted. An attacker could exploit this vulnerability by repeatedly creat…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages14 packages

▶NVDcisco/asa_5505_firmware4 versions+3
▶NVDcisco/asa_5510_firmware4 versions+3
▶NVDcisco/asa_5520_firmware4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-hc53-772h-hrgp: A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attac↗2022-05-24
▶
CVEList
Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability↗2020-05-06
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability↗2020-05-06
▶