CVE-2020-27124: Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability
A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause the affected device to reload unexpectedly, leading to a denial of service (DoS) condition. The vulnerability is due to improper error handling on established SSL/TLS connections. An attacker could exploit this vulnerability by establishing an SSL/TLS connection with the affected device and then sending a malicious SSL/TLS message within that connection. A successful exploit could allow the attacker to cause the device to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27124?
The severity of CVE-2020-27124 is high due to its potential to cause a denial of service (DoS) condition.
How do I fix CVE-2020-27124?
To fix CVE-2020-27124, you should apply the latest firmware or security updates recommended by Cisco for Adaptive Security Appliance (ASA) Software.
What impact does CVE-2020-27124 have on Cisco ASA devices?
CVE-2020-27124 can lead to unexpected device reloads, resulting in a denial of service and loss of accessibility to network resources.
Is authentication required to exploit CVE-2020-27124?
No, authentication is not required, allowing unauthenticated remote attackers to exploit CVE-2020-27124.
What versions of Cisco ASA are affected by CVE-2020-27124?
CVE-2020-27124 affects various versions of Cisco Adaptive Security Appliance (ASA) Software, and users should check the specific advisories from Cisco for details.