CVE-2020-3528 describes a denial-of-service vulnerability in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software, specifically within their OSPFv2 implementation. An unauthenticated, remote attacker can exploit incomplete input validation of OSPFv2 packets with Link-Local Signaling (LLS) data to cause an affected device to reload. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a severe impact with no user interaction required and low attack complexity. While the vulnerability is significant, there is currently no evidence of active exploitation, public exploit code, or notable community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 9.6CPE matchmatch criteria | cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:* | ||
< 6.3.0.6CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* | ||
>= 6.4.0, < 6.4.0.10CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* | ||
>= 6.5.0, < 6.5.0.5CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* | ||
>= 6.6.0, < 6.6.1CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.