2 lines
6.4 KiB
JSON
2 lines
6.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Cisco Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"n/a"}]}],"source":"psirt@cisco.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"AED88F6A-9C56-4005-B809-00E5637CCA27","versionEndExcluding":"9.6","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"9997155D-94FE-4EB6-82C3-C83DD7DE246E","versionEndExcluding":"6.3.0.6","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"AFE5964E-248F-40E5-AA08-1628D6838920","versionEndExcluding":"6.4.0.10","versionStartIncluding":"6.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"405EE3D4-ABED-48FF-AA58-DDB8A203DE4F","versionEndExcluding":"6.5.0.5","versionStartIncluding":"6.5.0","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"EA30B1C5-DEAE-41D2-B756-030EDF0F6AF9","versionEndExcluding":"6.6.1","versionStartIncluding":"6.6.0","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"E38D6F74-E407-4232-86C9-178AC3D00F1C","versionEndExcluding":"9.8.4.26","versionStartIncluding":"9.8.0","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"E16D2CA3-B494-4348-BF0C-03969D1423D0","versionEndExcluding":"9.9.2.80","versionStartIncluding":"9.9.0","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"EFF8B79C-41E6-4367-8A37-C1A41DA8345E","versionEndExcluding":"9.10.1.44","versionStartIncluding":"9.10.0","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"F71893A1-284B-453E-A9F4-579FAB514E9B","versionEndExcluding":"9.12.4.4","versionStartIncluding":"9.12.0","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"A4148D30-F285-4045-A017-82F5BF074233","versionEndExcluding":"9.13.1.13","versionStartIncluding":"9.13.0","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","matchCriteriaId":"97B216C8-49C2-43DA-9D7C-3290B5EBF334","versionEndExcluding":"9.14.1.19","versionStartIncluding":"9.14.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation when the affected software processes certain OSPFv2 packets with Link-Local Signaling (LLS) data. An attacker could exploit this vulnerability by sending a malformed OSPFv2 packet to an affected device. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition."},{"lang":"es","value":"Una vulnerabilidad en la implementación OSPF versión 2 (OSPFv2) de Cisco Adaptive Security Appliance (ASA) Software y Cisco Firepower Threat Defense (FTD) Software, podría permitir a un atacante remoto no autenticado causar la recarga de un dispositivo afectado, resultando en una condición de denegación de servicio (DoS). La vulnerabilidad es debido a una comprobación de entrada incompleta cuando el software afectado procesa ciertos paquetes OSPFv2 con datos Link-Local Signaling (LLS). Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete OSPFv2 malformado a un dispositivo afectado. Una explotación con éxito podría permitir a un atacante causar que un dispositivo afectado se recargue, resultando en una condición de DoS"}],"id":"CVE-2020-3528","lastModified":"2026-08-11T19:37:30.880","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"psirt@cisco.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2020-3528","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-11-13T17:12:26.713141Z","version":"2.0.3"}}]},"published":"2020-10-21T19:15:16.887","references":[{"source":"psirt@cisco.com","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospflls-37Xy2q6r"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospflls-37Xy2q6r"}],"sourceIdentifier":"psirt@cisco.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"psirt@cisco.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-400"}],"source":"nvd@nist.gov","type":"Primary"}]}
|