H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2020-3259

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.

Vulnerability
TypeVulnerability
External ID—
First seen2024-02-15
Last seen2024-02-15

Confidence

—

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Added2024-02-15
Due date2024-03-07
60 recorded

Relationships

mitigates
from Remediate CVE-2020-3259
Mitigation
related-to
to Account Footprinting
Technique
related-to
to Active OS Fingerprinting
Technique
related-to
to Browser Fingerprinting
Technique
related-to
to DNS Zone Transfers
Technique
related-to
to Eavesdropping
Technique
related-to
to Enumerate Mail Exchange (MX) Records
Technique
related-to
to Establish Rogue Location
Technique
related-to
to Excavation
Technique
related-to
to Exploiting Trust in Client
Technique
related-to
to File Discovery
Technique
related-to
to Fingerprinting
Technique
related-to
to Footprinting
Technique
related-to
to Group Permission Footprinting
Technique
related-to
to Host Discovery
Technique
related-to
to ICMP Address Mask Request
Technique
related-to
to ICMP Echo Request Ping
Technique
related-to
to ICMP Error Message Echoing Integrity Probe
Technique
related-to
to ICMP Error Message Quoting Probe
Technique
related-to
to ICMP Information Request
Technique
related-to
to Identify Shared Files/Directories on System
Technique
related-to
to IP (DF) 'Don't Fragment Bit' Echoing Probe
Technique
related-to
to IP 'ID' Echoed Byte-Order Probe
Technique
related-to
to IP ID Sequencing Probe
Technique
related-to
to Network Topology Mapping
Technique
related-to
to Owner Footprinting
Technique
related-to
to Passive OS Fingerprinting
Technique
related-to
to Peripheral Footprinting
Technique
related-to
to Port Scanning
Technique
related-to
to Process Footprinting
Technique
related-to
to Reusing Session IDs (aka Session Replay)
Technique
related-to
to Scanning for Vulnerable Software
Technique
related-to
to Services Footprinting
Technique
related-to
to Session Credential Falsification through Prediction
Technique
related-to
to Shoulder Surfing
Technique
related-to
to Subverting Environment Variable Values
Technique
related-to
to TCP ACK Ping
Technique
related-to
to TCP ACK Scan
Technique
related-to
to TCP Congestion Control Flag (ECN) Probe
Technique
related-to
to TCP Connect Scan
Technique
related-to
to TCP FIN Scan
Technique
related-to
to TCP Initial Window Size Probe
Technique
related-to
to TCP (ISN) Counter Rate Probe
Technique
related-to
to TCP (ISN) Greatest Common Divisor Probe
Technique
related-to
to TCP (ISN) Sequence Predictability Probe
Technique
related-to
to TCP Null Scan
Technique
related-to
to TCP Options Probe
Technique
related-to
to TCP RPC Scan
Technique
related-to
to TCP 'RST' Flag Checksum Probe
Technique
related-to
to TCP Sequence Number Probe
Technique
related-to
to TCP SYN Ping
Technique
related-to
to TCP SYN Scan
Technique
related-to
to TCP Timestamp Probe
Technique
related-to
to TCP Window Scan
Technique
related-to
to TCP Xmas Scan
Technique
related-to
to Timestamp Request
Technique
related-to
to Traceroute Route Enumeration
Technique
related-to
to UDP Ping
Technique
related-to
to UDP Scan
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
2 external

References

nvd
CVE-2020-3259
open
cwe
CWE-200
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance