PT-2020-2506 · Cisco · Cisco Ftd

Published 2020-05-06 · Updated 2024-11-26 · CVE-2020-3312

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the application policy configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data on an affected device. The issue is due to insufficient application identification and inadequate access control. An attacker could exploit this by sending crafted traffic to an affected device, potentially allowing them to gain unauthorized read access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Incorrect Permission

Weakness Enumeration

CWE-284

CWE-732

Related Identifiers

BDU:2020-02517

CVE-2020-3312

Affected Products

Cisco Ftd

References · 4

• https://bdu.fstec.ru/vul/2020-02517 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3312 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-infodis-kZxGtUJD · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3312 · Security Note