CVE-2020-3195
A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to incorrect processing of certain OSPF packets. An attacker could exploit this vulnerability by sending a series of crafted OSPF packets to be processed by an affected device. A successful exploit could allow the attacker to continuously consume memory on an affected device and eventually cause it to reload, resulting in a denial of service (DoS) condition.
Published:May 6, 2020
Last Modified:Aug 11, 2026
EPS:May 6, 2020
EPSS Score:0.01873
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Adaptive Security Appliance Software
Cisco
Adaptive Security Appliance Software
Vendor
Cisco
Product
Asa 5505
Cisco
Asa 5505
Vendor
Cisco
Product
Asa 5505 Firmware
Cisco
Asa 5505 Firmware
Vendor
Cisco
Product
Asa 5510
Cisco
Asa 5510
Vendor
Cisco
Product
Asa 5510 Firmware
Cisco
Asa 5510 Firmware
Vendor
Cisco
Product
Asa 5512-x
Cisco
Asa 5512-x
Vendor
Cisco
Product
Asa 5512-x Firmware
Cisco
Asa 5512-x Firmware
Vendor
Cisco
Product
Asa 5515-x
Cisco
Asa 5515-x
Vendor
Cisco
Product
Asa 5515-x Firmware
Cisco
Asa 5515-x Firmware
Vendor
Cisco
Product
Asa 5520
Cisco
Asa 5520
Vendor
Cisco
Product
Asa 5520 Firmware
Cisco
Asa 5520 Firmware
Vendor
Cisco
Product
Asa 5525-x
Cisco
Asa 5525-x
Vendor
Cisco
Product
Asa 5525-x Firmware
Cisco
Asa 5525-x Firmware
Vendor
Cisco
Product
Asa 5540
Cisco
Asa 5540
Vendor
Cisco
Product
Asa 5540 Firmware
Cisco
Asa 5540 Firmware
Vendor
Cisco
Product
Asa 5545-x
Cisco
Asa 5545-x
Vendor
Cisco
Product
Asa 5545-x Firmware
Cisco
Asa 5545-x Firmware
Vendor
Cisco
Product
Asa 5550
Cisco
Asa 5550
Vendor
Cisco
Product
Asa 5550 Firmware
Cisco
Asa 5550 Firmware
Vendor
Cisco
Product
Asa 5555-x
Cisco
Asa 5555-x
Vendor
Cisco
Product
Asa 5555-x Firmware
Cisco
Asa 5555-x Firmware
Vendor
Cisco
Product
Asa 5580
Cisco
Asa 5580
Vendor
Cisco
Product
Asa 5580 Firmware
Cisco
Asa 5580 Firmware
Vendor
Cisco
Product
Asa 5585-x
Cisco
Asa 5585-x
Vendor
Cisco
Product
Asa 5585-x Firmware
Cisco
Asa 5585-x Firmware
Vendor
Cisco
Product
Secure Firewall Threat Defense
Cisco
Secure Firewall Threat Defense
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
