CVE-2020-3186: 
Cisco Firepower Threat Defense (FTD) vulnerability analysis and mitigation

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software was identified as CVE-2020-3186. The vulnerability stems from inconsistencies in the configuration of different management access lists, where ports may be allowed in one access list while being denied in another (Cisco Advisory).

The vulnerability is classified under CWE-284 (Improper Access Control) and received attention from security researchers. The issue relates to the management access list configuration where conflicting rules between different access lists could potentially lead to security bypass scenarios (NVD).

The vulnerability could allow an attacker to bypass configured access control lists, potentially gaining unauthorized access to the affected system. This could compromise the security posture of the affected Cisco FTD installations (Cisco Advisory).

The vulnerability has been documented with Cisco Bug ID CSCvr13823. While specific exploit details are not publicly available, the nature of the vulnerability suggests it could be exploited by attackers who can reach the management interface of affected systems (Cisco Advisory).

According to the Cisco Security Advisory, no workarounds are available for this vulnerability. The recommended action is to apply the appropriate software updates as provided by Cisco (Cisco Advisory).