imPC@ndo EN

Tracker / CVE-2020-3186

CVE-2020-3186

Media 5.3

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the configuration of different management access lists, with ports allowed in one access list and denied in another. An attacker could exploit this vulnerability by sending crafted remote management traffic to the local IP address of an affected system. A successful exploit could allow the attacker to bypass the configured management access list policies, and traffic to the management interface would not be properly denied.

Prodotti e versioni affette

cisco asa_5505_firmware
cisco asa_5510_firmware
cisco asa_5512-x_firmware
cisco asa_5515-x_firmware
cisco asa_5520_firmware
cisco asa_5525-x_firmware
cisco asa_5540_firmware
cisco asa_5545-x_firmware
cisco asa_5550_firmware
cisco asa_5555-x_firmware
cisco asa_5580_firmware
cisco asa_5585-x_firmware
cisco secure_firewall_threat_defense · 6.3.0 → 6.3.0.6
cisco secure_firewall_threat_defense · 6.4.0 → 6.4.0.7
cisco secure_firewall_threat_defense · 6.5.0 → 6.5.0.2

Analisi

Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.

Riferimenti