CVE Watch—

CVE-2020-3259

Cisco ASA and FTD Information Disclosure Vulnerability

CVSS

—

Sin CVSS

EPSS

71.8%

p99

KEV

SÍ

15 feb 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

71.8%EPSS · 30 días71.8%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Vulnerabilidad

Cisco ASA and FTD Information Disclosure Vulnerability

Añadido a KEV

15 feb 2024

Remediar antes de

7 mar 2024

Uso conocido en ransomware

Sí

Descripción resumida

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-info-disclose-9eJtycMB; https://nvd.nist.gov/vuln/detail/CVE-2020-3259

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2020-3452—

100.0%

KEV—80Cisco ASA and FTD Read-Only Path Traversal Vulnerability—CVE-2020-3580—

99.7%

KEV—80Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability—CVE-2024-20353—

99.3%

KEV—80Cisco ASA and FTD Denial of Service Vulnerability—CVE-2024-20359—

97.1%

KEV—79Cisco ASA and FTD Privilege Escalation Vulnerability—CVE-2024-20481—

96.5%

KEV—79Cisco ASA and FTD Denial-of-Service Vulnerability—