Логотип exploitDog
bind:CVE-2020-3186
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-3186

Количество 3

Количество 3

nvd логотип

CVE-2020-3186

почти 6 лет назад

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the configuration of different management access lists, with ports allowed in one access list and denied in another. An attacker could exploit this vulnerability by sending crafted remote management traffic to the local IP address of an affected system. A successful exploit could allow the attacker to bypass the configured management access list policies, and traffic to the management interface would not be properly denied.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-h2j6-v888-8gxm

больше 3 лет назад

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the configuration of different management access lists, with ports allowed in one access list and denied in another. An attacker could exploit this vulnerability by sending crafted remote management traffic to the local IP address of an affected system. A successful exploit could allow the attacker to bypass the configured management access list policies, and traffic to the management interface would not be properly denied.

EPSS: Низкий
fstec логотип

BDU:2020-02518

почти 6 лет назад

Уязвимость микропрограммного обеспечения межсетевых экранов Cisco Firepower Threat Defense, связанная с недостатками контроля доступа, позволяющая нарушителю окзать воздействие на целостность защищаемой информации

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-3186

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the configuration of different management access lists, with ports allowed in one access list and denied in another. An attacker could exploit this vulnerability by sending crafted remote management traffic to the local IP address of an affected system. A successful exploit could allow the attacker to bypass the configured management access list policies, and traffic to the management interface would not be properly denied.

CVSS3: 5.3
0%
Низкий
почти 6 лет назад
github логотип
GHSA-h2j6-v888-8gxm

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the configuration of different management access lists, with ports allowed in one access list and denied in another. An attacker could exploit this vulnerability by sending crafted remote management traffic to the local IP address of an affected system. A successful exploit could allow the attacker to bypass the configured management access list policies, and traffic to the management interface would not be properly denied.

0%
Низкий
больше 3 лет назад
fstec логотип
BDU:2020-02518

Уязвимость микропрограммного обеспечения межсетевых экранов Cisco Firepower Threat Defense, связанная с недостатками контроля доступа, позволяющая нарушителю окзать воздействие на целостность защищаемой информации

CVSS3: 5.3
0%
Низкий
почти 6 лет назад

Уязвимостей на страницу