8.6 Élevée

CVE-2026-20101 A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD…

Description

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to insufficient error checking when processing SAML messages. An attacker could exploit this vulnerability by sending crafted SAML messages to the SAML service. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.23	9.23.1 → 9.23.1.3	Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22	9.22.1.1 → 9.22.2	Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20	9.20.1 → 9.20.3.20	Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19	9.19.1 → 9.19.1.42	Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18	9.18.1 → 9.18.4.57	Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.17	9.17.1 → 9.17.1.46	Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16	9.16.1 → 9.16.4.84	Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.12	9.12.1 → 9.12.4.67	Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.7	7.7.0 → 7.7.10.1	Pas de correctif indiqué

Afficher les 7 autres branches

Produit	Versions touchées	Corrigé en
Cisco Secure Firewall Threat Defense (FTD) Software 7.6	7.6.0 → 7.6.2.1	Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.4	7.4.0 → 7.4.2.4	Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.3	7.3.0 → 7.3.1.2	Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.2	7.2.0 → 7.2.10.2	Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.1	7.1.0 → 7.1.0.3	Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.0	7.0.0 → 7.0.8.1	Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 6.4	6.4.0 → 6.4.0.18	Pas de correctif indiqué

Références

cisco-sa-asaftd-vpn-m9sx6MbC sec.cloudapps.cisco.com

Chronologie

Publiée 4 mars 2026
Dernière modification 5 mars 2026

Les 48 CVE de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software →

CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability 8.6 Élevée CVE-2026-20121 A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall… 5.3 Moyenne CVE-2026-20120 A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall… 5.8 Moyenne CVE-2026-20248 A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software… 6.8 Moyenne

Suivre cette CVE