CVE Watch—

CVE-2020-3452

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

CVSS

—

Sin CVSS

EPSS

100.0%

p100

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 días100.0%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Vulnerabilidad

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

3 may 2022

Uso conocido en ransomware

Descripción resumida

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-3452

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2020-3580—

99.7%

KEV—80Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability—CVE-2020-3259—

99.4%

KEV—80Cisco ASA and FTD Information Disclosure Vulnerability—CVE-2024-20353—

99.3%

KEV—80Cisco ASA and FTD Denial of Service Vulnerability—CVE-2024-20359—

97.1%

KEV—79Cisco ASA and FTD Privilege Escalation Vulnerability—CVE-2024-20481—

96.5%

KEV—79Cisco ASA and FTD Denial-of-Service Vulnerability—