coldbraid

CVE-2020-3452 Cisco Adaptive Security Appliance (ASA) And Firepower Threat Defense (FTD)

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A…

CVSS
not scored

CWE-20

On CISA’s exploited list

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known