CVE-2020-3259 is a critical vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software, specifically affecting certain AnyConnect and WebVPN configurations. This buffer tracking issue allows an unauthenticated, remote attacker to retrieve sensitive memory contents by sending a crafted GET request to the web services interface. The vulnerability has a CVSS score of 7.5 (HIGH) due to its network-based attack vector, low attack complexity, and high potential for confidential information disclosure. It requires no user interaction or privileges. This CVE is actively exploited in the wild, notably by ransomware campaigns, and is listed in CISA's KEV catalog. While no public exploit code is available on platforms like Metasploit or ExploitDB, it has garnered significant community discussion and media coverage, highlighting its real-world impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.2.3, < 6.2.3.16CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* | ||
>= 6.3.0, < 6.3.0.6CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* | ||
>= 6.4.0, < 6.4.0.9CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* | ||
>= 6.5.0, < 6.5.0.5CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* | ||
>= 9.8, < 9.8.4.20CPE matchmatch criteria | cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.