CVE-2020-3259
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.
CISA Known Exploited Vulnerability
Vendor / Product
Cisco — Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Date Added
2024-02-15
Remediation Due
2024-03-07
Ransomware Use
CONFIRMED
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-info-disclose-9eJtycMB; https://nvd.nist.gov/vuln/detail/CVE-2020-3259
Weakness Classification (1)
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| cisco | adaptive_security_appliance_software | 9.8 – 9.8.4.20 |
| cisco | adaptive_security_appliance_software | 9.9 – 9.9.2.67 |
| cisco | adaptive_security_appliance_software | 9.10 – 9.10.1.40 |
| cisco | adaptive_security_appliance_software | 9.12 – 9.12.3.9 |
| cisco | adaptive_security_appliance_software | 9.13 – 9.13.1.10 |
| cisco | secure_firewall_threat_defense | 6.2.3 – 6.2.3.16 |
| cisco | secure_firewall_threat_defense | 6.3.0 – 6.3.0.6 |
| cisco | secure_firewall_threat_defense | 6.4.0 – 6.4.0.9 |
| cisco | secure_firewall_threat_defense | 6.5.0 – 6.5.0.5 |
References & Advisories (2)
Vendor Advisory
US Government Resource