Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2020-3528
CVE-2020-3528:
Cisco Adaptive Security Appliance (ASA) vulnerability analysis and mitigation
Overview
A vulnerability (CVE-2020-3528) was identified in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software. The vulnerability was disclosed on October 21, 2020, and received a high severity rating with a CVSS score of 8.6 (Cisco Event).
Technical details
The vulnerability exists in Cisco's Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software, specifically affecting their OSPF Version 2 implementation. The severity of this vulnerability is rated as High with a CVSS score of 8.6, indicating significant potential impact (Cisco Event).
Impact
When exploited, this vulnerability could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition (Threatpost).
Exploitability
The vulnerability could be exploited by an unauthenticated, remote attacker. As of the initial disclosure, there were no reports of this vulnerability being exploited in the wild (Threatpost).
Additional resources
Source: This report was generated using AI
Related Cisco Adaptive Security Appliance (ASA) vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management