All vulnerabilities
CVE-2020-3452

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Network & edge
Open in ThreatlineRecord JSON
CVSS
7.5High
ExploitationExploited in the wildAdded to KEV 3 Nov 2021CISA KEV
Exploit odds (EPSS)>99.9%Chance of exploitation activity in the next 30 days, higher than 99.9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9.6.4.42Also 9.8.4.20, 9.9.2.74 and 3 moreCVE List
Federal deadline3 May 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

  • 9.6.4.42Cisco Adaptive Security Appliance (ASA) SoftwareCVE List
  • 9.8.4.20Cisco Adaptive Security Appliance (ASA) SoftwareCVE List
  • 9.9.2.74Cisco Adaptive Security Appliance (ASA) SoftwareCVE List
  • 9.10.1.42Cisco Adaptive Security Appliance (ASA) SoftwareCVE List
  • 9.13.1.10Cisco Adaptive Security Appliance (ASA) SoftwareCVE List
  • 9.14.1.10Cisco Adaptive Security Appliance (ASA) SoftwareCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 22 Jul 2020, 20:00 UTCPublishedCVE List
  2. 28 Jul 2020Exploit code publicExploit-DB
  3. 3 Nov 2021Added to CISA KEVCISA KEV

Public exploit code and templates 4

  • Webapps exploitCisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2) 15 Dec 2020Exploit-DB
  • Webapps exploitCisco ASA and FTD 9.6.4.42 - Path Traversal 12 Oct 2020Exploit-DB
  • Webapps exploitCisco Adaptive Security Appliance Software 9.11 - Local File Inclusion 28 Jul 2020Exploit-DB
  • Scanner templateCisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File InclusionNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.

Text from CVE List

Affected versions 6

  • Cisco Adaptive Security Appliance (ASA) Softwareaffected: unspecified before 9.6.4.42CVE List
  • Cisco Adaptive Security Appliance (ASA) Softwareaffected: unspecified before 9.8.4.20CVE List
  • Cisco Adaptive Security Appliance (ASA) Softwareaffected: unspecified before 9.9.2.74CVE List
  • Cisco Adaptive Security Appliance (ASA) Softwareaffected: unspecified before 9.10.1.42CVE List
  • Cisco Adaptive Security Appliance (ASA) Softwareaffected: unspecified before 9.13.1.10CVE List
  • Cisco Adaptive Security Appliance (ASA) Softwareaffected: unspecified before 9.14.1.10CVE List

References 3