Summary

• The October 21, 2020 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication includes 17 Cisco Security Advisories that describe 17 vulnerabilities in Cisco ASA, FMC, and FTD Software. Cisco has released software updates for these vulnerabilities. 

  All of these vulnerabilities have a Security Impact Rating (SIR) of High.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  cisco-sa-asaftd-dos-QFcNEPfx Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability	CVE-2020-3554	High	8.6
  cisco-sa-asaftd-frag-memleak-mCtqdP9n Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability	CVE-2020-3373	High	8.6
  cisco-sa-asaftd-ospflls-37Xy2q6r Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability	CVE-2020-3528	High	8.6
  cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability	CVE-2020-3529	High	8.6
  cisco-sa-asa-ftd-tcp-dos-N3DMnU4T Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability	CVE-2020-3572	High	8.6
  cisco-sa-asaftd-webdos-fBzM5Ynw Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability	CVE-2020-3304	High	8.6
  cisco-sa-asaftd-fileup-dos-zvC7wtys Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability	CVE-2020-3436	High	8.6
  cisco-sa-ftd-ssl-dcrpt-dos-RYEkX4yy Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability	CVE-2020-3562	High	8.6
  cisco-sa-ftd-icmp-dos-hxxcycM Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability	CVE-2020-3571	High	8.6
  cisco-sa-ftdfmc-dirtrav-NW8XcuSB Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability	CVE-2020-3550	High	8.1
  cisco-sa-ftdfmc-sft-mitm-tc8AzFs2 Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability	CVE-2020-3549	High	8.1
  cisco-sa-fmc-cacauthbyp-NCLGZm3Q Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability	CVE-2020-3410	High	8.1
  cisco-sa-ftdfmc-dos-NjYvDcLA Cisco Firepower Management Center Software Denial of Service Vulnerability	CVE-2020-3499	High	8.6
  cisco-sa-ftd-inline-dos-nXqUyEqM Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability	CVE-2020-3577	High	7.4
  cisco-sa-ftd-container-esc-FmYqFBQV Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability	CVE-2020-3514	High	8.2
  cisco-sa-ftd-snmp-dos-R8ENPbOs Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability	CVE-2020-3533	High	8.6
  cisco-sa-ftd-tcp-dos-GDcZDqAf Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability	CVE-2020-3563	High	8.6

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A