CVE-2026-20154: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

1 karet z 1 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-20154

EPSS 0.01 EPSS k 2. 11. 2026

Hodnocení závažnosti

8.6 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy bez přihlášení bez zásahu uživatele
dopad bez úniku dat beze změny dat úplný výpadek
přesah dopad i mimo zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper rate limiting for syslog message 419002. An attacker could exploit this vulnerability by sending a flood of…

EPSS 0.01 CVE-2026-20154 Cisco US

tg: zranitelnost tp: DDoS

· Cisco PSIRT · Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability