Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-3312

Опубликовано: 06 мая 2020
Источник: nvd
CVSS3: 5.8
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

A vulnerability in the application policy configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data on an affected device. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.10:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 67%
0.0055
Низкий

5.8 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284
CWE-732

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

A vulnerability in the application policy configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data on an affected device. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data.

CVSS3: 7.5
fstec
почти 6 лет назад

Уязвимость конфигурации политики приложений межсетевых экранов Cisco Firepower Threat Defense, позволяющая нарушителю получить доступ на чтение данных

EPSS

Процентиль: 67%
0.0055
Низкий

5.8 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284
CWE-732