PT-2020-4471 · Cisco · Cisco Ftd

Published 2020-10-21 · Updated 2021-10-19 · CVE-2020-3577

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the ingress packet processing path could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition due to insufficient validation when Ethernet frames are processed. An attacker could exploit this by sending malicious Ethernet frames through an affected device, potentially causing the /ngfw partition to fill, resulting in administrators being unable to log in or the device failing to boot correctly, or causing a process crash that would lead to the device reloading.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-05019

CVE-2020-3577

Affected Products

Cisco Ftd

References · 4

• https://osv.dev/vulnerability/CVE-2020-3577 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-inline-dos-nXqUyEqM · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05019 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3577 · Security Note