CVE-2020-3548— Cisco AsyncOS TLS 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2020-3548の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Email Security Appliance Denial Of Service Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient processing of incoming TLS traffic. An attacker could exploit this vulnerability by sending a series of crafted TLS packets to an affected device. A successful exploit could allow the attacker to trigger a prolonged state of high CPU utilization. The affected device would still be operative, but response time and overall performance may be degraded.There are no workarounds that address this vulnerability.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
算法复杂性
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco AsyncOS TLS 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco AsyncOS是美国思科（Cisco）公司的一款应用于思科设备的操作系统。 Cisco AsyncOS TLS存在安全漏洞，该漏洞源于TLS流量的处理效率低，攻击者可以通过向受影响的设备发送特制的TLS数据包来利用此漏洞，受影响的设备仍将可操作，但是响应时间和整体性能可能会下降。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Secure Email | N/A | - |
II. CVE-2020-3548の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2020-3548のインテリジェンス情報
请登录查看更多情报信息。
CVE-2020-3548 厂商安全公告 (1)
Same Patch Batch · Cisco · 2024-11-18 · 28 CVEs total
| CVE-2020-27124 | 8.6 HIGH | Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability |
| CVE-2020-26071 | 8.4 HIGH | Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability |
| CVE-2020-26074 | 7.8 HIGH | Cisco SD-WAN vManage Privilege Escalation Vulnerability |
| CVE-2020-26073 | 7.5 HIGH | Cisco SD-WAN vManage Directory Traversal Vulnerability |
| CVE-2021-1440 | 6.8 MEDIUM | Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerabili |
| CVE-2021-1232 | 6.5 MEDIUM | Cisco SD-WAN vManage Information Disclosure Vulnerability |
| CVE-2021-1379 | 6.5 MEDIUM | Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Exe |
| CVE-2020-3539 | 6.3 MEDIUM | Cisco Data Center Network Manager Authorization Bypass Vulnerability |
| CVE-2021-1444 | 6.1 MEDIUM | Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) |
| CVE-2020-3431 | 6.1 MEDIUM | Cisco Small Business RV Series Routers Cross-Site Scripting Vulnerability |
| CVE-2020-26067 | 5.4 MEDIUM | Cisco Webex Teams Web Interface Cross-Site Scripting Vulnerability |
| CVE-2020-26063 | 5.4 MEDIUM | Cisco Integrated Management Controller Software Authorization Bypass Vulnerability |
| CVE-2021-1234 | 5.3 MEDIUM | Cisco SD-WAN vManage Information Disclosure Vulnerabilities |
| CVE-2021-1132 | 5.3 MEDIUM | Cisco Network Services Orchestrator Path Traversal Vulnerability |
| CVE-2021-1424 | 5.3 MEDIUM | Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability |
| CVE-2020-26062 | 5.3 MEDIUM | Cisco Integrated Management Controller Username Enumeration Vulnerability |
| CVE-2021-1461 | 4.9 MEDIUM | Cisco SD-WAN Software Signature Verification Bypass Vulnerability |
| CVE-2020-3538 | 4.6 MEDIUM | Cisco Data Center Network Manager Path Traversal Vulnerability |
| CVE-2021-1410 | 4.3 MEDIUM | Cisco Webex Meetings Unauthorized Distribution List Update Vulnerability |
| CVE-2021-1425 | 4.3 MEDIUM | Cisco Cisco Email Security Appliance and Content Security Management Appliance Informatio |
Showing 20 of 28 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Cisco Secure Email
- CVE-2025-20393
Cisco Secure Email Gateway and Cisco Secure Email and Web Ma - CVE-2025-20153
Cisco ESA mail Bypass - CVE-2025-20207
Cisco Secure Email Gateway, Cisco Secure Email and Web Appli - CVE-2025-20185
Cisco Secure Email and Web Manager, Secure Email Gateway, an - CVE-2025-20184
Cisco Secure Email and Web Manager and Secure Web Appliance
同じベンダー: Cisco
- CVE-2026-20178
Cisco Webex App URL参数验证缺陷致重定向 - CVE-2026-20246
Cisco Umbrella Virtual Appliance Privilege Escalation Vulner - CVE-2026-20220
Cisco Crosswork Network Controller Remote Code Execution Vul - CVE-2026-20190
Cisco Identity Services Engine Information Disclosure Vulner - CVE-2026-20181
Cisco Identity Services Engine Remote Code Execution Vulnera
同じ弱点: CWE-407
- CVE-2026-13311
shell-quote parse() is quadratic in token count, enabling de - CVE-2026-54892
Plug: quadratic-time decoding of nested query/body parameter - CVE-2026-48511
MessagePack-CSharp: ExpandoObject formatter can perform quad - CVE-2026-48516
MessagePack-CSharp: InterfaceLookupFormatter bypasses collis - CVE-2026-49460
pypdf: Inefficient decoding of FlateDecode PNG predictor str
V. CVE-2020-3548へのコメント
まだコメントはありません