1. Home
  2. CVE Database
  3. CVE-2020-3189
HIGH · 8.6

CVE-2020-3189

A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system...

Vulnerability Description

A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system memory over time, which can cause unexpected system behaviors or device crashes. The vulnerability is due to the system memory not being properly freed for a VPN System Logging event generated when a VPN session is created or deleted. An attacker could exploit this vulnerability by repeatedly creating or deleting a VPN tunnel connection, which could leak a small amount of system memory for each logging event. A successful exploit could allow the attacker to cause system memory depletion, which can lead to a systemwide denial of service (DoS) condition. The attacker does not have any control of whether VPN System Logging is configured or not on the device, but it is enabled by default.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoFirepower Threat Defense6.2.3.12
CiscoAsa 5505 Firmware9.9\(2\)
CiscoAsa 5505-
CiscoAsa 5510 Firmware9.9\(2\)
CiscoAsa 5510-
CiscoAsa 5512-X Firmware9.9\(2\)
CiscoAsa 5512-X-
CiscoAsa 5515-X Firmware9.9\(2\)
CiscoAsa 5515-X-
CiscoAsa 5520 Firmware9.9\(2\)
CiscoAsa 5520-
CiscoAsa 5525-X Firmware9.9\(2\)
CiscoAsa 5525-X-
CiscoAsa 5540 Firmware9.9\(2\)
CiscoAsa 5540-
CiscoAsa 5545-X Firmware9.9\(2\)
CiscoAsa 5545-X-
CiscoAsa 5550 Firmware9.9\(2\)
CiscoAsa 5550-
CiscoAsa 5555-X Firmware9.9\(2\)

Related Weaknesses (CWE)

CWE-401CWE-400

References

FAQ

What is CVE-2020-3189?

CVE-2020-3189 is a vulnerability with a CVSS score of 8.6 (HIGH). A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system...

How severe is CVE-2020-3189?

CVE-2020-3189 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3189?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Firepower Threat Defense, Cisco Asa 5505 Firmware, Cisco Asa 5505, Cisco Asa 5510 Firmware, Cisco Asa 5510.