CVE-2020-3188

A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections to an affected device, which could result in a denial of service (DoS) condition. The vulnerability exists because the default session timeout period for specific to-the-box remote management connections is too long. An attacker could exploit this vulnerability by sending a large and sustained number of crafted remote management connections to an affected device, resulting in a buildup of those connections over time. A successful exploit could allow the attacker to cause the remote management interface or Cisco Firepower Device Manager (FDM) to stop responding and cause other management functions to go offline, resulting in a DoS condition. The user traffic that is flowing through the device would not be affected, and the DoS condition would be isolated to remote management only.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:cisco:asa_5505_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5505_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5505:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:cisco:asa_5510_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5510_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5510:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:cisco:asa_5512-x_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5512-x_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5512-x:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:cisco:asa_5515-x_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5515-x_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5515-x:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:cisco:asa_5520_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5520_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5520:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:cisco:asa_5525-x_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5525-x_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5525-x:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:o:cisco:asa_5540_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5540_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5540:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
OR cpe:2.3:o:cisco:asa_5545-x_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5545-x_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5545-x:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
OR cpe:2.3:o:cisco:asa_5550_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5550_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5550:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
OR cpe:2.3:o:cisco:asa_5555-x_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5555-x_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5555-x:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
OR cpe:2.3:o:cisco:asa_5580_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5580_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5580:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
OR cpe:2.3:o:cisco:asa_5585-x_firmware:9.8\(3\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5585-x_firmware:101.6\(1.96\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5585-x:-:*:*:*:*:*:*:*

Information

Published : 2020-05-06 10:15

Updated : 2021-08-12 11:18


NVD link : CVE-2020-3188

Mitre link : CVE-2020-3188


JSON object : View

CWE
CWE-613

Insufficient Session Expiration

Advertisement

dedicated server usa

Products Affected

cisco

  • asa_5510_firmware
  • asa_5585-x
  • asa_5515-x
  • asa_5512-x_firmware
  • asa_5580_firmware
  • asa_5540_firmware
  • asa_5580
  • asa_5525-x_firmware
  • asa_5515-x_firmware
  • asa_5555-x
  • asa_5520_firmware
  • asa_5512-x
  • asa_5555-x_firmware
  • asa_5540
  • asa_5545-x_firmware
  • asa_5550
  • asa_5545-x
  • asa_5585-x_firmware
  • asa_5520
  • asa_5550_firmware
  • asa_5510
  • firepower_threat_defense
  • asa_5505_firmware
  • asa_5505
  • asa_5525-x