VDB
CVE-2020-3179
CVE-2020-3179
PUBLISHED
CVSS 8.600000381469727 HIGH
A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory handling error when GRE over IPv6 traffic is processed. An attacker could exploit this vulnerability by sending crafted GRE over IPv6 packets with either IPv4 or IPv6 payload through an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition.
EPSS 1.16% · 78.9th percentile
Risk Scores
CVSS 3.0
8.600000381469727
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS Score
1.16%
78.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | asa_5520_firmware | 101.5\(1.26\), 9.9\(2\) |
| cisco | asa_5555-x_firmware | 9.9\(2\), 101.5\(1.26\) |
| cisco | asa_5585-x_firmware | *, 101.5\(1.26\) |
| cisco | asa_5515-x_firmware | 9.9\(2\), * |
| cisco | asa_5525-x_firmware | 9.9\(2\), 101.5\(1.26\) |
| cisco | asa_5550_firmware | 9.9\(2\), 101.5\(1.26\) |
| cisco | asa_5512-x_firmware | 9.9\(2\), 101.5\(1.26\) |
| cisco | asa_5510_firmware | 9.9\(2\), 101.5\(1.26\) |
| cisco | asa_5540_firmware | *, 101.5\(1.26\) |
| cisco | asa_5580_firmware | 9.9\(2\), 101.5\(1.26\) |
| cisco | asa_5545-x_firmware | 9.9\(2\), 101.5\(1.26\) |
| cisco | firepower_threat_defense | 6.4.0, 6.3.0 |
| cisco | asa_5505_firmware | 9.9\(2\), 101.5\(1.26\) |
| Cisco | Cisco Firepower Threat Defense Software | n/a |
Exploit Intelligence
Timeline
- May 6, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-vpn-dos-qY7BHpjN advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ospf-memleak-DHpsgfnv advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-N2vQZASR advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-path-JE3azWw43 advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ospf-dos-RhMQY8qx advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-2-sS2h7aWe advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-Rdpe34sd8 advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-mgcp-SUqB8VKH advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-asa-kerberos-bypass-96Gghe2sS advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-3179 advisory