CVE-2020-3305: A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower…

PriorityP341high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

EPSS

1.23%

65.7th percentile

A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP packets. An attacker could exploit this vulnerability by sending a crafted BGP packet. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
cisco	adaptive_security_appliance	< 9.6.4.36	9.6.4.36
cisco	adaptive_security_appliance	—	—
cisco	adaptive_security_appliance_software	>= 9.12 < 9.12.2.9	9.12.2.9
cisco	adaptive_security_appliance_software	>= 9.7 < 9.8.4.10	9.8.4.10
cisco	adaptive_security_appliance_software	>= 9.9 < 9.10.1.30	9.10.1.30
cisco	cisco_adaptive_security_appliance_software	—	—
cisco	firepower_threat_defense	< 6.3.0.5	6.3.0.5
cisco	firepower_threat_defense	>= 6.4.0 < 6.4.0.6	6.4.0.6

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvdv3.06.8MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

vendor_cisco6.8MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.