PT-2020-2167 · Cisco · Cisco Ftd

Published 2020-05-06 · Updated 2020-05-12 · CVE-2020-3255

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the packet processing functionality could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to inefficient memory management. An attacker could exploit this by sending a high rate of IPv4 or IPv6 traffic through an affected device, which would need to match a configured block action in an access control policy. This could cause a memory exhaustion condition, resulting in a DoS for traffic transiting the device and sluggish performance of the management interface. Once the traffic flood is stopped, performance should return to previous states.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2020-02071

CVE-2020-3255

Affected Products

Cisco Ftd

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-N2vQZASR · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02071 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3255 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3255 · Vendor Advisory
• https://t.me/cvenotify/3590 · Telegram Post