Vulnerability-Lookup

CVE-2026-20021 (GCVE-0-2026-20021)

Vulnerability from cvelistv5 – Published: 2026-03-04 18:35 – Updated: 2026-03-04 21:30

Summary

A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improperly validating input by the OSPF protocol when parsing packets. An attacker could exploit this vulnerability by by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition.

Severity ?

4.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-401 - Missing Release of Memory after Effective Lifetime

Assigner

cisco

References

URL

NCSC-2026-0077

Vulnerability from csaf_ncscnl - Published: 2026-03-05 09:05 - Updated: 2026-03-05 09:05

Summary

Kwetsbaarheden verholpen in Cisco Secure Firewall systemen

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).

Interpretaties: De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API's, en andere functionaliteiten van de firewall software.

Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-20: Improper Input Validation

CWE-27: Path Traversal: 'dir/../../filename'

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-131: Incorrect Calculation of Buffer Size

CWE-138: Improper Neutralization of Special Elements

CWE-190: Integer Overflow or Wraparound

CWE-244: Improper Clearing of Heap Memory Before Release ('Heap Inspection')

CWE-248: Uncaught Exception

CWE-250: Execution with Unnecessary Privileges

CWE-269: Improper Privilege Management

CWE-279: Incorrect Execution-Assigned Permissions

CWE-284: Improper Access Control

CWE-330: Use of Insufficiently Random Values

CWE-388: CWE-388

CWE-401: Missing Release of Memory after Effective Lifetime

CWE-404: Improper Resource Shutdown or Release

CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CWE-476: NULL Pointer Dereference

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-772: Missing Release of Resource after Effective Lifetime

CWE-787: Out-of-bounds Write

CWE-788: Access of Memory Location After End of Buffer

CWE-823: Use of Out-of-range Pointer Offset

CVE-2024-20340

Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2024-20358

A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2026-20101

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-330 - Use of Insufficiently Random Values

CVE-2026-20020

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.

6.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-20 - Improper Input Validation

CVE-2026-20073

A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-284 - Improper Access Control

CVE-2026-20007

A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-284 - Improper Access Control

CVE-2026-20018

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

CWE-27 - Path Traversal: 'dir/../../filename'

CVE-2026-20002

Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center's web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2026-20015

A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

CVE-2026-20062

A vulnerability in Cisco Secure Firewall ASA Software's CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.

7.2 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-279 - Incorrect Execution-Assigned Permissions

CVE-2026-20031

A vulnerability in ClamAV's CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-248 - Uncaught Exception

CVE-2026-20039

A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-244 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')

CVE-2026-20022

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.

6.1 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-823 - Use of Out-of-range Pointer Offset

CVE-2026-20050

A vulnerability in Cisco Secure Firewall Threat Defense Software's Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-404 - Improper Resource Shutdown or Release

CVE-2026-20069

A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CVE-2026-20009

A vulnerability in Cisco Secure Firewall ASA's SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-138 - Improper Neutralization of Special Elements

CVE-2026-20014

A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

CVE-2026-20016

Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-250 - Execution with Unnecessary Privileges

CVE-2026-20021

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.

4.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

CVE-2026-20049

A vulnerability in Cisco Secure Firewall ASA and FTD software's handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

CVE-2026-20105

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

CVE-2026-20025

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.

6.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

CVE-2026-20082

A vulnerability in Cisco Secure Firewall ASA Software's handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

CVE-2026-20006

A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-388 - -

CVE-2026-20103

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

CVE-2026-20008

A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2026-20063

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-250 - Execution with Unnecessary Privileges

CVE-2026-20106

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software's Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

CVE-2026-20017

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-250 - Execution with Unnecessary Privileges

CVE-2026-20100

Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2026-20044

A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-269 - Improper Privilege Management

CVE-2026-20024

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.

6.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2026-20064

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-250 - Execution with Unnecessary Privileges

CVE-2026-20023

A vulnerability in Cisco ASA and FTD software's OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.

6.1 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

CVE-2026-20003

Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2026-20102

A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-20013

A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

CVE-2026-20070

A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users' browsers.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVE-2026-20001

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2026-20052

A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-788 - Access of Memory Location After End of Buffer

References

URL

GHSA-QJF3-5P7Q-6R9M

Vulnerability from github – Published: 2026-03-04 21:32 – Updated: 2026-03-04 21:32

Details

This vulnerability is due to improperly validating input by the OSPF protocol when parsing packets. An attacker could exploit this vulnerability by by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition.

Severity ?

4.3 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-20021"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-401"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-03-04T19:16:12Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service (DoS) condition.\n\n This vulnerability is due to improperly validating input by the OSPF protocol when parsing packets. An attacker could exploit this vulnerability by by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition.",
  "id": "GHSA-qjf3-5p7q-6r9m",
  "modified": "2026-03-04T21:32:45Z",
  "published": "2026-03-04T21:32:45Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20021"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

FKIE_CVE-2026-20021

Vulnerability from fkie_nvd - Published: 2026-03-04 19:16 - Updated: 2026-04-16 20:36

Severity ?

4.3 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW	Vendor Advisory

Impacted products

Vendor	Product	Version
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	*
cisco	firepower_threat_defense_software	6.4.0
cisco	firepower_threat_defense_software	6.4.0.1
cisco	firepower_threat_defense_software	6.4.0.2
cisco	firepower_threat_defense_software	6.4.0.3
cisco	firepower_threat_defense_software	6.4.0.4
cisco	firepower_threat_defense_software	6.4.0.5
cisco	firepower_threat_defense_software	6.4.0.6
cisco	firepower_threat_defense_software	6.4.0.7
cisco	firepower_threat_defense_software	6.4.0.8
cisco	firepower_threat_defense_software	6.4.0.9
cisco	firepower_threat_defense_software	6.4.0.10
cisco	firepower_threat_defense_software	6.4.0.11
cisco	firepower_threat_defense_software	6.4.0.12
cisco	firepower_threat_defense_software	6.4.0.13
cisco	firepower_threat_defense_software	6.4.0.14
cisco	firepower_threat_defense_software	6.4.0.15
cisco	firepower_threat_defense_software	6.4.0.16
cisco	firepower_threat_defense_software	6.4.0.17
cisco	firepower_threat_defense_software	6.4.0.18
cisco	firepower_threat_defense_software	7.0.0
cisco	firepower_threat_defense_software	7.0.0.1
cisco	firepower_threat_defense_software	7.0.1
cisco	firepower_threat_defense_software	7.0.1.1
cisco	firepower_threat_defense_software	7.0.2
cisco	firepower_threat_defense_software	7.0.2.1
cisco	firepower_threat_defense_software	7.0.3
cisco	firepower_threat_defense_software	7.0.4
cisco	firepower_threat_defense_software	7.0.5
cisco	firepower_threat_defense_software	7.0.6
cisco	firepower_threat_defense_software	7.0.6.1
cisco	firepower_threat_defense_software	7.0.6.2
cisco	firepower_threat_defense_software	7.0.6.3
cisco	firepower_threat_defense_software	7.0.7
cisco	firepower_threat_defense_software	7.0.8
cisco	firepower_threat_defense_software	7.0.8.1
cisco	firepower_threat_defense_software	7.1.0
cisco	firepower_threat_defense_software	7.1.0.1
cisco	firepower_threat_defense_software	7.1.0.2
cisco	firepower_threat_defense_software	7.1.0.3
cisco	firepower_threat_defense_software	7.2.0
cisco	firepower_threat_defense_software	7.2.0.1
cisco	firepower_threat_defense_software	7.2.1
cisco	firepower_threat_defense_software	7.2.2
cisco	firepower_threat_defense_software	7.2.3
cisco	firepower_threat_defense_software	7.2.4
cisco	firepower_threat_defense_software	7.2.4.1
cisco	firepower_threat_defense_software	7.2.5
cisco	firepower_threat_defense_software	7.2.5.1
cisco	firepower_threat_defense_software	7.2.5.2
cisco	firepower_threat_defense_software	7.2.6
cisco	firepower_threat_defense_software	7.2.7
cisco	firepower_threat_defense_software	7.2.8
cisco	firepower_threat_defense_software	7.2.8.1
cisco	firepower_threat_defense_software	7.2.9
cisco	firepower_threat_defense_software	7.2.10
cisco	firepower_threat_defense_software	7.2.10.2
cisco	firepower_threat_defense_software	7.3.0
cisco	firepower_threat_defense_software	7.3.1
cisco	firepower_threat_defense_software	7.3.1.1
cisco	firepower_threat_defense_software	7.3.1.2
cisco	firepower_threat_defense_software	7.4.0
cisco	firepower_threat_defense_software	7.4.1
cisco	firepower_threat_defense_software	7.4.1.1
cisco	firepower_threat_defense_software	7.4.2
cisco	firepower_threat_defense_software	7.4.2.1
cisco	firepower_threat_defense_software	7.4.2.2
cisco	firepower_threat_defense_software	7.4.2.3
cisco	firepower_threat_defense_software	7.4.2.4
cisco	firepower_threat_defense_software	7.4.3
cisco	firepower_threat_defense_software	7.6.0
cisco	firepower_threat_defense_software	7.6.1
cisco	firepower_threat_defense_software	7.6.2
cisco	firepower_threat_defense_software	7.6.2.1
cisco	firepower_threat_defense_software	7.7.0
cisco	firepower_threat_defense_software	7.7.10
cisco	firepower_threat_defense_software	7.7.10.1

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E19306D0-10B5-43DE-8AA4-7F245F9F2797",
              "versionEndIncluding": "9.12.4.67",
              "versionStartIncluding": "9.12.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1EE3F40-E21C-4604-8E5F-56C2126F4384",
              "versionEndIncluding": "9.16.4.85",
              "versionStartIncluding": "9.16.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DE10C66-EC3C-482C-A8E7-2F19DC30E434",
              "versionEndIncluding": "9.17.1.46",
              "versionStartIncluding": "9.17.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A97D374-5334-469D-AB27-D8F7B85DE69F",
              "versionEndIncluding": "9.18.4.68",
              "versionStartIncluding": "9.18.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F2DBD2A-57A4-4DB1-8DF9-DA777382865B",
              "versionEndIncluding": "9.19.1.42",
              "versionStartIncluding": "9.19.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B0958D9-D3ED-428A-A6D3-7CEB589A743E",
              "versionEndIncluding": "9.20.4.14",
              "versionStartIncluding": "9.20.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C057D2D3-0535-4E82-81AD-939B9DC2F07D",
              "versionEndIncluding": "9.22.2.14",
              "versionStartIncluding": "9.22.1.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBE65F68-D239-413F-BDDF-A976387338B1",
              "versionEndIncluding": "9.23.1.22",
              "versionStartIncluding": "9.23.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BDAB447-1F2C-4983-89B2-E723A82BCD71",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A0AB352-A4ED-4DF0-B749-84078DA48FA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF3B749B-2EFB-4734-B775-180A6E8627FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "54006F46-95F3-4785-9660-C1DF21789783",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C61B2F7C-195B-4DBF-8C3C-0F269E56CEC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "C35A81B4-FC1D-4E28-8235-7DAD7F1B1C43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "C62E1E33-480B-44C7-8155-EF725ACE7A5F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "01831166-3C2C-48CC-A8DE-EEE631349C4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5107E77-57C9-4C7B-A974-BAF6F01BCA12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "1ED851EA-1BDF-4D88-83E8-53B14F7C1FF4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "279C2F98-E719-413A-A284-5AE1B28171CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBA2A3A4-12A9-4280-980E-B6D932185AEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "5665319D-5532-4F03-8F12-4F98C5548023",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "5994E2A7-118C-4E08-AF03-4F2409E55AEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A7844A0-5EF6-4AD6-ACB8-E01D8579AC93",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CD8A9AC-3FD8-4B30-8785-B541ADC4EDEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "298441F6-BAB5-4116-BEAF-DEFB75A52CBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "63E08CFF-68F5-45E6-B6F3-D111D33C5E2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "F58348A7-25EC-4023-B4CA-CAB35A3798C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDE321FE-9034-4E0F-9A32-D41443A9D86A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "09E779C6-2740-47A1-A6D5-E22C6DC7D1CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E794B83A-4A14-431C-B882-578CD70E412B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "292E681D-D4C0-4D85-B84C-4C9328FCD12F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "963A59C5-6EC0-4BAD-B547-EFA785707050",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F1551BB-37A4-4383-8AA8-DA25642B7353",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "88B6632C-4A35-4D10-B323-8C3266319114",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "638D2739-FAA7-4880-BC2F-BC632140E9DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "40098313-CC8A-49E6-8095-093881DA7107",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "C00C3A8F-34AE-443E-9B77-0532C9F11F1A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "01F32FDA-54ED-4117-8FA7-D749140F628F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8BA96B9-A0DD-4065-A295-FA85A33F7E84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "04BF5898-73CB-480B-9D6E-B6A7696A6140",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7991D4E-57F8-48A6-A098-C70107C87F80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1D2BF71-1104-477A-B15F-3A959D46ABFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "89A7BB35-0AA6-403A-8D96-80FA61F13A77",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B07AA16A-6DE0-4226-8A44-CDA8E26830D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B7AC5D5-B171-4163-BFB3-02163DD8817B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "31AD8591-C99A-4780-A742-13CFD921F46A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "173C2DA6-625C-465C-A080-E578539E30F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8288F62-8BEC-4318-8096-9D36817D1D80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A617690D-92D7-4793-AEAC-15F31162D5F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9608894-B4A7-49A1-863A-D44E53D6CE69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FDB77ED-AB5E-475F-A5F8-515B807E99A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BEE0323-AC5A-4570-9681-14CD9FB8FD46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6773BC9-C84C-4249-B6C3-FD39BAAA0555",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4DFC6F7-2BA1-4F32-AD55-8BF0888FDB92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "291705AE-7BAE-4305-BECA-204821BF467A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC683581-4B46-46A8-BBD8-CB01283641DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC2A816A-63D6-498B-B167-BE71F0019DB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "294D71C7-FFC3-4431-88AA-E03EFAE78CCE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA8287D0-B817-4143-BE34-B3C7FEC7BDEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "9621C619-C4F8-4906-8A24-E560C08F6921",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB7F9C8B-35E4-459C-B31E-FCF2DAD0120E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB73C40D-5A5A-4851-BEFA-71CA2865EE00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9AD9D74-FDDF-443D-8193-E4B5B28CC815",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "BACA483F-52CE-4F10-8D95-F93C8C8D16F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AF82E95-C8D3-402B-BC97-29EA1771D5EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0350CCE9-512A-4A77-8FAB-7A8F9B061170",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CC55E28-36AC-4D40-BB6D-A1B53503F5E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "66F0A624-DDE8-490C-9DA4-762CD39764B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "901C034C-DDA4-49E1-B8B4-62F3B5C00173",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D094896F-425A-4E69-8941-41147222C42D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "30825677-8EF7-46A0-BB47-887707E007C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3DF5D18-28B3-45C8-A10A-56BB1202C5A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BC61767-2E32-409B-9A5E-DFE2895D2DD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F80A4394-4E2B-4166-BA37-8FB03D1E2ACD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7AB8A3CA-D333-44D4-BA5A-5F966B8EFFBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D3E5582-8D7C-4250-BFCA-B87973521E23",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "70ED3291-517C-452F-995C-56A6899ACE24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "48F33ECC-CAFC-4F7C-9A64-5A536D76F67F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A995725-A2C1-4461-AB71-1ECD26AFBB9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C7DB8C1-6C50-43E8-AC70-ED3C4EB62D8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7C4FC5F-B68F-4ADA-AD3B-06A530619C10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5831F9A4-E89F-4927-B332-CB9D23CD5907",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "899C69AD-93AC-4707-BF1D-55EDB6EEF7C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0E44D44-8D4D-4B1F-9D00-CCD68B5D3415",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to improperly validating input by the OSPF protocol when parsing packets. An attacker could exploit this vulnerability by by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el protocolo OSPF del software Cisco Secure Firewall Adaptive Security Appliance (ASA) y del software Cisco Secure Firewall Threat Defense (FTD) podr\u00eda permitir a un atacante autenticado y adyacente agotar la memoria en un dispositivo afectado, lo que resultar\u00eda en una condici\u00f3n de denegaci\u00f3n de servicio (DoS).\nEsta vulnerabilidad se debe a la validaci\u00f3n incorrecta de la entrada por parte del protocolo OSPF al analizar paquetes. Un atacante podr\u00eda explotar esta vulnerabilidad enviando paquetes OSPF manipulados a un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante agotar la memoria en el dispositivo afectado, lo que resultar\u00eda en una condici\u00f3n de DoS."
    }
  ],
  "id": "CVE-2026-20021",
  "lastModified": "2026-04-16T20:36:40.847",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "psirt@cisco.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2026-03-04T19:16:12.150",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-401"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Primary"
    }
  ]
}

CISCO-SA-ASAFTD-OSPF-ZH8PHBSW

Vulnerability from csaf_cisco - Published: 2026-03-04 16:00 - Updated: 2026-03-04 16:00

Summary

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software OSPF Protocol Vulnerabilities

Notes

Summary: Multiple vulnerabilities in the OSPF feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is part of the March 2026 release of the Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2026 Semiannual Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75736"].

Vulnerable Products: At the time of publication, these vulnerabilities affected Cisco Secure Firewall ASA Software and Secure FTD Software if they were running the OSPF protocol. For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.

Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by these vulnerabilities. Cisco has confirmed that these vulnerabilities do not affect Cisco Secure Firewall Management Center (FMC) Software.

Details: The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability. In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities. Details about the vulnerabilities are as follows: CVE-2026-20020: Cisco Secure Firewall ASA Software and Secure FTD Software OSPF DoS Vulnerability A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. If OSPF authentication is enabled, the attacker must know the secret key to exploit this vulnerability. This vulnerability is due to insufficient input validation when processing OSPF update packets. An attacker could exploit this vulnerability by sending crafted OSPF update packets. A successful exploit could allow the attacker to create a buffer overflow, causing the affected device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Bug ID(s): CSCwn69076 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwn69076"] CVE ID: CVE-2026-20020 Security Impact Rating (SIR): Medium CVSS Base Score: 6.8 CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2026-20024: Cisco Secure Firewall ASA Software and Secure FTD Software OSPF Heap Corruption Vulnerability A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key. This vulnerability is due to heap corruption in OSPF when parsing packets. An attacker could exploit this vulnerability by sending crafted packets to the OSPF service. A successful exploit could allow the attacker to corrupt the heap, causing the affected device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Bug ID(s): CSCwn69075 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwn69075"] CVE ID: CVE-2026-20024 Security Impact Rating (SIR): Medium CVSS Base Score: 6.8 CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2026-20025: Cisco Secure Firewall ASA Software and Secure FTD Software OSPF DoS Vulnerability A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key. This vulnerability is due to insufficient input validation when processing OSPF link-state update (LSU) packets. An attacker could exploit this vulnerability by sending crafted OSPF LSU packets. A successful exploit could allow the attacker to corrupt the heap, causing the device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Bug ID(s): CSCwn69078 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwn69078"] CVE ID: CVE-2026-20025 Security Impact Rating (SIR): Medium CVSS Base Score: 6.8 CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2026-20022: Cisco Secure Firewall ASA Software and Secure FTD Software OSPF DoS Vulnerability A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the command debug ip ospf canon. This vulnerability is due to insufficient input validation when processing OSPF LSU packets. An attacker could exploit this vulnerability by sending crafted unauthenticated OSPF packets. A successful exploit could allow the attacker to write to memory outside of the packet data, causing the device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Bug ID(s): CSCwo71552 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo71552"], CSCwn69081 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwn69081"] CVE ID: CVE-2026-20022 Security Impact Rating (SIR): Medium CVSS Base Score: 6.1 CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2026-20023: Cisco Secure Firewall ASA Software and Secure FTD Software OSPF Memory Corruption Vulnerability A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to corrupt memory on an affected device, resulting in a DoS condition. This vulnerability is due to memory corruption when parsing OSPF protocol packets. An attacker could exploit this vulnerability by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to cause memory corruption, causing the affected device to reboot, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Bug ID(s): CSCwq73656 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwq73656"] CVE ID: CVE-2026-20023 Security Impact Rating (SIR): Medium CVSS Base Score: 6.1 CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2026-20021: Cisco Secure Firewall ASA Software and Secure FTD Software OSPF Memory Exhaustion Vulnerability A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a DoS condition. This vulnerability is due to insufficient input validation when processing OSPF protocol packets. An attacker could exploit this vulnerability by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Bug ID(s): CSCwn69079 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwn69079"] CVE ID: CVE-2026-20021 Security Impact Rating (SIR): Medium CVSS Base Score: 4.3 CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Workarounds: There are no workarounds that address these vulnerabilities.

Fixed Software: Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate these vulnerabilities and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory. Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software To help customers determine their exposure to vulnerabilities in Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”). To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to search for vulnerabilities that affect a specific software release. To use the form, follow these steps: Choose which advisories the tool will search—all advisories, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or only this advisory. Choose the appropriate software. Choose the appropriate platform. Enter a release number—for example, 9.20.3.4 for Cisco Secure Firewall ASA Software or 7.4.2 for Cisco Secure FTD Software. Click Check. Only this advisoryAll Critical and High advisoriesAll advisoriesCisco ASA SoftwareCisco FMC SoftwareCisco FTD SoftwareAny Platform3000 Series Industrial Security Appliances (ISA)ASA 5500-X Series FirewallsASA Service ModuleAdaptive Security Virtual Appliance (ASAv)Firepower 1000 SeriesFirepower 2100 SeriesFirepower 4100 SeriesFirepower 9000 SeriesFirepower NGFW VirtualSecure Firewall 1200 SeriesSecure Firewall 3100 SeriesSecure Firewall 4200 SeriesFirepower Management Center Appliances For instructions on upgrading a Cisco Secure FTD device, see the appropriate Cisco Secure FMC upgrade guide ["https://www.cisco.com/c/en/us/support/security/defense-center/products-installation-guides-list.html"]. Additional Resources For help determining the best Cisco Secure Firewall ASA, Secure FMC, or Secure FTD Software release, see the following Recommended Releases documents. If a security advisory recommends a later release, Cisco recommends following the advisory guidance. Cisco Secure Firewall ASA Compatibility ["https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html"] Cisco Secure Firewall ASA Upgrade Guide ["https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html"] Cisco Secure Firewall Threat Defense Compatibility Guide ["https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/threat-defense-compatibility.html"]

Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Exploitation and Public Announcements: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

Source: These vulnerabilities were found during internal security testing by Jason Crowder of the Cisco Advanced Security Initiatives Group (ASIG).

Legal Disclaimer: SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT The Cisco Support and Downloads ["https://www.cisco.com/c/en/us/support/index.html"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid. Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade. When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories ["https://www.cisco.com/go/psirt"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] or their contracted maintenance providers. LEGAL DISCLAIMER DETAILS CISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. Copies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories ["https://www.cisco.com/go/psirt"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"] for more information.

CVE-2026-20022

6.1 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H