high7.5
CVE-2020-3306
A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthe…
Impact
A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to incorrect processing of certain DHCP packets. An attacker could exploit this vulnerability by sending a crafted DHCP packet to the affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Adaptive Security Appliance | before 9.6.4.34 |
| Cisco | Adaptive Security Appliance Software | from 9.7 before 9.8.4.10 from 9.9 before 9.10.1.30 from 9.12 before 9.12.3 |
| Cisco | Secure Firewall Threat Defense | before 6.3.0.5 from 6.4.0 before 6.4.0.4 |