CVE-2020-3564

medium Cisco
CVSS v3 Base Score
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
1.3%
Exploitation probability in 30 days
Top 32% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Published: October 21, 2020 (2146 days ago)
Last Modified: August 11, 2026
Vendor: Cisco
Source: NVD

Description

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and successfully complete FTP connections.

CWE

CWE-284

Affected Products

cisco adaptive security appliancecisco secure firewall threat defensecisco adaptive security appliance software

References

🔗 tools.cisco.com 🔗 tools.cisco.com