PT-2026-23040 · Cisco · Cisco Secure Firewall Asa+2

Jason Crowder · CVE-2026-20023 · Published 2026-03-04 · Updated 2026-05-04

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A flaw exists in the OSPF protocol implementation of the software that could allow a remote, unauthenticated attacker to disrupt service. The issue stems from improper handling of OSPF protocol packets, leading to memory corruption. An attacker can exploit this by sending specially crafted OSPF packets to a vulnerable device. Successful exploitation may cause the device to reboot, resulting in a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-20023

Affected Products

Cisco Asa

Cisco Secure Firewall Asa

Cisco Secure Firewall Threat Defense

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-20023 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW · Vendor Advisory
• https://t.me/CVEtracker/46349 · Telegram Post
• https://twitter.com/CVEnew/status/2029272774540136823 · Twitter Post
• https://t.me/cveNotify/162032 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2029408049576735134 · Twitter Post