CVE-2020-3303 : A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco

A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper management of system memory. An attacker could exploit this vulnerability by sending malicious IKEv1 traffic to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Published 2020-05-06 17:15:13

Updated 2023-08-16 16:17:08

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2020-3303

Cisco » Adaptive Security Appliance
Versions before (<) 9.6.4.36
cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asa 5505 » Version: N/A
When used together with: Cisco » Asa 5510 » Version: N/A
When used together with: Cisco » Asa 5512-x » Version: N/A
When used together with: Cisco » Asa 5515-x » Version: N/A
When used together with: Cisco » Asa 5520 » Version: N/A
When used together with: Cisco » Asa 5525-x » Version: N/A
When used together with: Cisco » Asa 5550 » Version: N/A
When used together with: Cisco » Asa 5555-x » Version: N/A
When used together with: Cisco » Asa 5580 » Version: N/A
When used together with: Cisco » Asa 5585-x » Version: N/A
Cisco » Adaptive Security Appliance Software
Versions from including (>=) 9.12 and before (<) 9.12.2.9
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asa 5505 » Version: N/A
When used together with: Cisco » Asa 5510 » Version: N/A
When used together with: Cisco » Asa 5512-x » Version: N/A
When used together with: Cisco » Asa 5515-x » Version: N/A
When used together with: Cisco » Asa 5520 » Version: N/A
When used together with: Cisco » Asa 5525-x » Version: N/A
When used together with: Cisco » Asa 5550 » Version: N/A
When used together with: Cisco » Asa 5555-x » Version: N/A
When used together with: Cisco » Asa 5580 » Version: N/A
When used together with: Cisco » Asa 5585-x » Version: N/A
Cisco » Adaptive Security Appliance Software
Versions from including (>=) 9.7 and before (<) 9.8.4.10
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asa 5505 » Version: N/A
When used together with: Cisco » Asa 5510 » Version: N/A
When used together with: Cisco » Asa 5512-x » Version: N/A
When used together with: Cisco » Asa 5515-x » Version: N/A
When used together with: Cisco » Asa 5520 » Version: N/A
When used together with: Cisco » Asa 5525-x » Version: N/A
When used together with: Cisco » Asa 5550 » Version: N/A
When used together with: Cisco » Asa 5555-x » Version: N/A
When used together with: Cisco » Asa 5580 » Version: N/A
When used together with: Cisco » Asa 5585-x » Version: N/A
Cisco » Adaptive Security Appliance Software
Versions from including (>=) 9.9 and before (<) 9.10.1.30
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asa 5505 » Version: N/A
When used together with: Cisco » Asa 5510 » Version: N/A
When used together with: Cisco » Asa 5512-x » Version: N/A
When used together with: Cisco » Asa 5515-x » Version: N/A
When used together with: Cisco » Asa 5520 » Version: N/A
When used together with: Cisco » Asa 5525-x » Version: N/A
When used together with: Cisco » Asa 5550 » Version: N/A
When used together with: Cisco » Asa 5555-x » Version: N/A
When used together with: Cisco » Asa 5580 » Version: N/A
When used together with: Cisco » Asa 5585-x » Version: N/A
Cisco » Firepower Threat Defense
Versions from including (>=) 6.4.0 and before (<) 6.4.0.6
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Matching versions
Cisco » Firepower Threat Defense
Versions before (<) 6.3.0.5
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-3303

EPSS FAQ

0.46%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-3303

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
6.8	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H	2.2	4.0	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-3303

CWE-399

Assigned by: ykramarz@cisco.com (Secondary)
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-3303

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-BqYFRJt9

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-3303

Products affected by CVE-2020-3303

Exploit prediction scoring system (EPSS) score for CVE-2020-3303

CVSS scores for CVE-2020-3303

CWE ids for CVE-2020-3303

References for CVE-2020-3303