Aller au contenu
en Se connecter
8.6 Élevée

CVE-2026-20154 A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security…

Description

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper rate limiting for syslog message 419002. An attacker could exploit this vulnerability by sending a flood of TCP synchronization (SYN) packets to an affected device. A successful exploit could allow the attacker to cause high CPU utilization, resulting in performance degradation. 

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.23 9.23.1 → 9.23.1.22 Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22 9.22.1.1 → 9.22.2.20 Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20 9.20.1 → 9.20.4.14 Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19 9.19.1 → 9.19.1.42 Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18 9.18.1 → 9.18.4.68 Pas de correctif indiqué
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16 9.16.1 → 9.16.4.85 Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.7 7.7.0 → 7.7.11 Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.6 7.6.0 → 7.6.4 Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.4 7.4.0 → 7.4.4 Pas de correctif indiqué
Afficher les 3 autres branches
Produit Versions touchées Corrigé en
Cisco Secure Firewall Threat Defense (FTD) Software 7.3 7.3.0 → 7.3.1.2 Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.2 7.2.0 → 7.2.10.2 Pas de correctif indiqué
Cisco Secure Firewall Threat Defense (FTD) Software 7.0 7.0.0 → 7.0.8.1 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Les 48 CVE de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software →
CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability 8.6 Élevée CVE-2026-20121 A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall… 5.3 Moyenne CVE-2026-20120 A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall… 5.8 Moyenne CVE-2026-20248 A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software… 6.8 Moyenne
Suivre cette CVE