CVE-2020-3572

CVE-2020-3572 is a denial-of-service vulnerability affecting Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software. It stems from a memory leak during the closure of SSL/TLS connections in a specific state. An unauthenticated, remote attacker can exploit this by establishing and closing multiple SSL/TLS sessions under these conditions, leading to memory exhaustion and preventing new SSL/TLS connections. The vulnerability has a CVSS score of 8.6 (High), indicating a critical impact with high availability impact (A:H) and requiring manual intervention for recovery. It is easily exploitable remotely (AV:N) with low attack complexity (AC:L) and no user interaction (UI:N). Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal.