1. Home
  2. CVE Database
  3. CVE-2020-3298
HIGH · 7.5

CVE-2020-3298

A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticat...

Vulnerability Description

A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper memory protection mechanisms while processing certain OSPF packets. An attacker could exploit this vulnerability by sending a series of malformed OSPF packets in a short period of time to an affected device. A successful exploit could allow the attacker to cause a reload of the affected device, resulting in a DoS condition for client traffic that is traversing the device.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoFirepower Threat Defense>= 6.2.0, < 6.2.3.16
CiscoAdaptive Security Appliance Software>= 9.6.0, <= 9.6.4.40
CiscoAsa 5506-X-
CiscoAsa 5506H-X-
CiscoAsa 5506W-X-
CiscoAsa 5508-X-
CiscoAsa 5516-X-
CiscoAsa 5525-X-
CiscoAsa 5545-X-
CiscoAsa 5555-X-

Related Weaknesses (CWE)

CWE-125

References

FAQ

What is CVE-2020-3298?

CVE-2020-3298 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticat...

How severe is CVE-2020-3298?

CVE-2020-3298 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3298?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Firepower Threat Defense, Cisco Adaptive Security Appliance Software, Cisco Asa 5506-X, Cisco Asa 5506H-X, Cisco Asa 5506W-X.