CVE-2026-20082
published 2026-03-04CVE-2026-20082: A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an…
PriorityP353high8.6CVSS 3.1
AVNACLPRNUINSCCNINAH
EPSS
0.41%
33.4th percentile
A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly.
This vulnerability is due to improper handling of new, incoming TCP connections that are destined to management or data interfaces when the device is under a TCP SYN flood attack. An attacker could exploit this vulnerability by sending a crafted stream of traffic to an affected device. A successful exploit could allow the attacker to prevent all incoming TCP connections to the device from being established, including remote management access, Remote Access VPN (RAVPN) connections, and all network protocols that are TCP-based. This results in a denial of service (DoS) condition for affected features.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | >= 9.20.4.14 < 9.20.4.19 | 9.20.4.19 |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | secure_firewall_adaptive_security_appliance | — | — |
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
vendor_cisco8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
vendor_cisco·2026-03-04·CVSS 8.6
CVE-2026-20082 [HIGH] CWE-772 Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly.
This vulnerability is due to improper handling of new, incoming TCP connections that are destined to management or data interfaces when the device is under a TCP SYN flood attack. An attacker could exploit this vulnerability by sending a crafted stream of traffic to an affected device. A successful exploit could allow the attacker to prevent all incoming TCP connections to the device from being established, including remote management access, Remote
Cisco
Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
vendor_cisco·CVSS 3.1
CVE-2026-20082 Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
CVE-2026-20082: Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly. This vulnerability is due to improper handling of new, incoming TCP connections that are destined to management or data interfaces when the device is under a TCP SYN flood attack. An attacker could exploit this vulnerability by sending a crafted stream of traffic to an affected device. A successful exploit could allow the attacker to prevent all incoming TCP connections to the device from being established, including remote management
GHSA
GHSA-vrw4-xqvw-j7j7: A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an
ghsa_unreviewed·2026-03-04
CVE-2026-20082 [HIGH] CWE-772 GHSA-vrw4-xqvw-j7j7: A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an
A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly.
This vulnerability is due to improper handling of new, incoming TCP connections that are destined to management or data interfaces when the device is under a TCP SYN flood attack. An attacker could exploit this vulnerability by sending a crafted stream of traffic to an affected device. A successful exploit could allow the attacker to prevent all incoming TCP connections to the device from being established, including remote management access, Remote Access VPN (RAVPN) connections, and all network protocols that are TCP-based. This results in a denia
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-03-04
Published