PT-2020-2168 · Cisco · Cisco Ftd

Published 2020-05-06 · Updated 2021-08-12 · CVE-2020-3189

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the VPN System Logging functionality could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system memory over time, leading to unexpected system behaviors or device crashes. The issue arises from the system memory not being properly freed for a VPN System Logging event generated when a VPN session is created or deleted. An attacker could exploit this by repeatedly creating or deleting a VPN tunnel connection, causing a small amount of system memory to leak for each logging event. This could lead to a systemwide denial of service (DoS) condition. The VPN System Logging is enabled by default, but the attacker has no control over its configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Resource Exhaustion

Weakness Enumeration

CWE-401

CWE-400

Related Identifiers

BDU:2020-02072

CVE-2020-3189

Affected Products

Cisco Ftd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-3189 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-Rdpe34sd8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3189 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02072 · Security Note
• https://t.me/cvenotify/3583 · Telegram Post