1. Home
  2. CVE Database
  3. CVE-2020-3188
MEDIUM · 5.3

CVE-2020-3188

A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote ma...

Vulnerability Description

A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections to an affected device, which could result in a denial of service (DoS) condition. The vulnerability exists because the default session timeout period for specific to-the-box remote management connections is too long. An attacker could exploit this vulnerability by sending a large and sustained number of crafted remote management connections to an affected device, resulting in a buildup of those connections over time. A successful exploit could allow the attacker to cause the remote management interface or Cisco Firepower Device Manager (FDM) to stop responding and cause other management functions to go offline, resulting in a DoS condition. The user traffic that is flowing through the device would not be affected, and the DoS condition would be isolated to remote management only.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
CiscoFirepower Threat Defense>= 6.4.0, < 6.4.0.9
CiscoAsa 5505 Firmware9.8\(3\)
CiscoAsa 5505-
CiscoAsa 5510 Firmware9.8\(3\)
CiscoAsa 5510-
CiscoAsa 5512-X Firmware9.8\(3\)
CiscoAsa 5512-X-
CiscoAsa 5515-X Firmware9.8\(3\)
CiscoAsa 5515-X-
CiscoAsa 5520 Firmware9.8\(3\)
CiscoAsa 5520-
CiscoAsa 5525-X Firmware9.8\(3\)
CiscoAsa 5525-X-
CiscoAsa 5540 Firmware9.8\(3\)
CiscoAsa 5540-
CiscoAsa 5545-X Firmware9.8\(3\)
CiscoAsa 5545-X-
CiscoAsa 5550 Firmware9.8\(3\)
CiscoAsa 5550-
CiscoAsa 5555-X Firmware9.8\(3\)

Related Weaknesses (CWE)

CWE-613CWE-399

References

FAQ

What is CVE-2020-3188?

CVE-2020-3188 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote ma...

How severe is CVE-2020-3188?

CVE-2020-3188 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3188?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Firepower Threat Defense, Cisco Asa 5505 Firmware, Cisco Asa 5505, Cisco Asa 5510 Firmware, Cisco Asa 5510.