CVE-2020-3308

CVE-2020-3308 describes a vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software, including Cisco Secure Firewall Management Center. An authenticated, remote attacker with administrator credentials could exploit improper digital signature verification to install a malicious software patch. This medium-severity vulnerability (CVSS 4.9) has a network attack vector and high impact on integrity, allowing an attacker to boot a malicious image. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.