CVE-2020-3529
published 2020-10-21CVE-2020-3529: A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
PriorityP277high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
1.85%
76.8th percentile
A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient direct memory access (DMA) memory management during the negotiation phase of an SSL VPN connection. An attacker could exploit this vulnerability by sending a steady stream of crafted Datagram TLS (DTLS) traffic to an affected device. A successful exploit could allow the attacker to exhaust DMA memory on the device and cause a DoS condition.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance | < 9.6.4.45 | 9.6.4.45 |
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance_software | >= 9.10.0 < 9.10.1.44 | 9.10.1.44 |
| cisco | adaptive_security_appliance_software | >= 9.12.0 < 9.12.4.4 | 9.12.4.4 |
| cisco | adaptive_security_appliance_software | >= 9.13.0 < 9.13.1.13 | 9.13.1.13 |
| cisco | adaptive_security_appliance_software | >= 9.14.0 < 9.14.1.30 | 9.14.1.30 |
| cisco | adaptive_security_appliance_software | >= 9.8.0 < 9.8.4.29 | 9.8.4.29 |
| cisco | adaptive_security_appliance_software | >= 9.9.0 < 9.9.2.80 | 9.9.2.80 |
| cisco | cisco_adaptive_security_appliance_software | — | — |
| cisco | firepower_threat_defense | < 6.3.0.6 | 6.3.0.6 |
| cisco | firepower_threat_defense | >= 6.4.0 < 6.4.0.10 | 6.4.0.10 |
| cisco | firepower_threat_defense | >= 6.5.0 < 6.5.0.5 | 6.5.0.5 |
| cisco | firepower_threat_defense | >= 6.6.0 < 6.6.1 | 6.6.1 |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect a steady stream of crafted DTLS (Datagram TLS) traffic directed at the SSL VPN negotiation endpoint of Cisco ASA/FTD devices, which is the attack vector for exhausting DMA memory. ↗
- →Monitor Cisco ASA/FTD devices for unexpected reloads or DMA memory exhaustion events, particularly when SSL VPN is enabled, as these are indicators of successful exploitation. ↗
- →Track Cisco Bug ID CSCvu59817 for patch status and affected version identification on ASA/FTD devices. ↗
- ·Fixed releases for ASA code trains 9.13 and 9.14 may themselves be affected by a separate related vulnerability (Cisco ASA Software SSL/TLS DoS); operators should consult the updated advisory before patching. ↗
- ·There are no workarounds available for this vulnerability; patching is the only remediation. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vulncheck8.6HIGH
vendor_cisco8.6HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability
vendor_cisco·2020-10-21·CVSS 8.6
CVE-2020-3529 [HIGH] CWE-400 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability
Update from October 22nd, 2020: Cisco has become aware of a new Cisco Adaptive Security Appliance vulnerability that could affect the fixed releases recommended for code trains 9.13 and 9.14 in the Fixed Software section of this advisory. See the Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability for additional information.
A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition.
The
Cisco
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability
vendor_cisco·CVSS 3.1
CVE-2020-3529 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability
CVE-2020-3529: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability
Update from October 22nd, 2020 : Cisco has become aware of a new Cisco Adaptive Security Appliance vulnerability that could affect the fixed releases recommended for code trains 9.13 and 9.14 in the Fixed Software section of this advisory. See the Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability for additional information. A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) co
GHSA
GHSA-xwcw-m39w-gg87: A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Softw
ghsa_unreviewed·2022-05-24
CVE-2020-3529 [HIGH] CWE-400 GHSA-xwcw-m39w-gg87: A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Softw
A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient direct memory access (DMA) memory management during the negotiation phase of an SSL VPN connection. An attacker could exploit this vulnerability by sending a steady stream of crafted Datagram TLS (DTLS) traffic to an affected device. A successful exploit could allow the attacker to exhaust DMA memory on the device and cause a DoS condition.
VulnCheck
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource Consumption
vulncheck·2020·CVSS 8.6
CVE-2020-3529 [HIGH] Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource Consumption
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource Consumption
A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient direct memory access (DMA) memory management during the negotiation phase of an SSL VPN connection. An attacker could exploit this vulnerability by sending a steady stream of crafted Datagram TLS (DTLS) traffic to an affected device. A successful exploit could allow the attacker to exhaust DMA memory on the device and cause a DoS condition.
Affected: Cis
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-21
Published
Exploited in the wild