{"affected":[{"affectedData":[{"product":"Cisco Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"n/a"}]}],"source":"psirt@cisco.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7D2F5B96-8C64-4A50-9C63-93AC36383DB1","versionEndExcluding":"9.12.4.3","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"0AA89D2A-44F7-4207-BC0F-70BAA3C5AC1C","versionEndIncluding":"6.2.2","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"42DE562F-520D-4F3B-A84E-D2747E9FF188","versionEndExcluding":"6.4.0.10","versionStartIncluding":"6.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"405EE3D4-ABED-48FF-AA58-DDB8A203DE4F","versionEndExcluding":"6.5.0.5","versionStartIncluding":"6.5.0","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"94A60AA7-4878-4413-8E61-A37E6113EEDE","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"A4148D30-F285-4045-A017-82F5BF074233","versionEndExcluding":"9.13.1.13","versionStartIncluding":"9.13.0","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"BDD8BF1D-E300-461E-99C5-E191BE4173C2","versionEndExcluding":"9.14.1.30","versionStartIncluding":"9.14.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory exhaustion condition. An attacker could exploit this vulnerability by sending a high rate of crafted TCP traffic through an affected device. A successful exploit could allow the attacker to exhaust device resources, resulting in a DoS condition for traffic transiting the affected device."},{"lang":"es","value":"Una vulnerabilidad en el procesamiento de paquetes TCP de Cisco Adaptive Security Appliance (ASA) Software y Cisco Firepower Threat Defense (FTD) Software, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad es debido a una condición de agotamiento de la memoria. Un atacante podría explotar esta vulnerabilidad mediante el envío de una alta tasa de tráfico TCP diseñado por medio de un dispositivo afectado. Una explotación con éxito podría permitir a un atacante agotar los recursos del dispositivo, resultando en una condición de DoS para el tráfico que transita por el dispositivo afectado"}],"id":"CVE-2020-3554","lastModified":"2026-08-11T19:37:30.880","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"psirt@cisco.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2020-3554","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-11-13T17:12:09.155663Z","version":"2.0.3"}}]},"published":"2020-10-21T19:15:17.420","references":[{"source":"psirt@cisco.com","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-QFcNEPfx"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-QFcNEPfx"}],"sourceIdentifier":"psirt@cisco.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"psirt@cisco.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-400"}],"source":"nvd@nist.gov","type":"Primary"}]}