PT-2020-4469 · Cisco · Cisco Ftd

Sanmith Prakash · Published 2020-10-21 · Updated 2020-10-23 · CVE-2020-3563

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense Software (affected versions not specified)

Description The issue is related to inefficient memory management in the packet processing functionality, which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This can be achieved by sending a large number of TCP packets to a specific port on the device, potentially exhausting system memory and causing the device to reload unexpectedly. No manual intervention is required to recover the device after it has reloaded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2020-05017

CVE-2020-3563

Affected Products

Cisco Ftd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-3563 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3563 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-GDcZDqAf · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05017 · Security Note
• https://t.me/cibsecurity/15502 · Telegram Post