CVE-2020-3585

CVE-2020-3585 is a vulnerability in the TLS handler of Cisco ASA Software and Firepower Threat Defense (FTD) Software for Firepower 1000 Series firewalls. It allows an unauthenticated, remote attacker to gain access to sensitive information due to improper countermeasures against the Bleichenbacher attack for RSA key exchange cipher suites. The vulnerability has a low CVSS score of 3.7, indicating a network attack vector with high attack complexity, requiring an attacker to both capture TLS traffic and establish numerous TLS connections. A successful exploit could lead to decryption of previously captured TLS sessions. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.