CVE-2020-3125— Cisco Adaptive Security Appliances Software 授权问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2020-3125の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured to perform Kerberos authentication for VPN or local device access. The vulnerability is due to insufficient identity verification of the KDC when a successful authentication response is received. An attacker could exploit this vulnerability by spoofing the KDC server response to the ASA device. This malicious response would not have been authenticated by the KDC. A successful attack could allow an attacker to bypass Kerberos authentication.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
认证机制不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco Adaptive Security Appliances Software 授权问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Adaptive Security Appliances Software（ASA Software）是美国思科（Cisco）公司的一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。 Cisco ASA Software中存在授权问题漏洞，该漏洞源于在接收到身份验证成功的响应时，程序没有对KDC进行充分的身份验证。攻击者可利用该漏洞绕过Kerberos身份验证。以下产品及版本受到影响：Cisco ASA Software 9.6及之前版本，9.7版本，9.8版本，9
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | n/a | - |
II. CVE-2020-3125の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2020-3125のインテリジェンス情報
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-asa-kerberos-bypass-96Gghe2sSvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2020-3125
Same Patch Batch · Cisco · 2020-05-06 · 35 CVEs total
| CVE-2020-3298 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed | |
| CVE-2020-3246 | Cisco Umbrella Carriage Return Line Feed Injection Vulnerability | |
| CVE-2020-3253 | Cisco Firepower Threat Defense Software Shell Access Vulnerability | |
| CVE-2020-3254 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gat | |
| CVE-2020-3255 | Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability | |
| CVE-2020-3256 | Cisco Hosted Collaboration Mediation Fulfillment XML External Expansion Vulnerability | |
| CVE-2020-3259 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi | |
| CVE-2020-3283 | Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability | |
| CVE-2020-3285 | Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability | |
| CVE-2020-3196 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS D | |
| CVE-2020-3301 | Cisco Firepower Management Center Static Credential Vulnerabilities | |
| CVE-2020-3302 | Cisco Firepower Management Center File Overwrite Vulnerability | |
| CVE-2020-3303 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Den | |
| CVE-2020-3305 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denia | |
| CVE-2020-3306 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Deni | |
| CVE-2020-3307 | Cisco Firepower Management Center Arbitrary Log File Write Vulnerability | |
| CVE-2020-3308 | Cisco Firepower Threat Defense Software Signature Verification Bypass Vulnerability | |
| CVE-2020-3318 | Cisco Firepower Management Center Static Credential Vulnerabilities | |
| CVE-2020-3178 | Cisco Content Security Management Appliance Open Redirect Vulnerabilities | |
| CVE-2020-3179 | Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial o |
Showing 20 of 35 CVEs. View all on vendor page →
IV. 関連脆弱性
- CVE-2025-20254
Cisco Secure Firewall Adaptive Security Appliance和Cisco Secu - CVE-2025-20263
Cisco Adaptive Security Appliance Software and Firepower Thr - CVE-2025-20253
Cisco IOS, IOS XE, Secure Firewall Adaptive Security Applian - CVE-2025-20252
Cisco Secure Firewall Management Center和Cisco Secure Firewal - CVE-2025-20251
Cisco Secure Firewall Adaptive Security Appliance and Cisco
同じベンダー: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
同じ弱点: CWE-287
- CVE-2026-8244
Industrial Application Software IAS Canias ERP Login RMI imp - CVE-2026-8216
Industrial Application Software IAS Canias ERP Java RMI Sess - CVE-2026-8214
Industrial Application Software IAS Canias ERP RMI doAction - CVE-2026-42560
auth: Patreon provider assigns the same local user ID to eve - CVE-2026-41070
openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, all
V. CVE-2020-3125へのコメント
まだコメントはありません