CVE-2020-3189: cisco asa_5505_firmware Uncontrolled Resource Consumption
Vulnerability summary
CVE-2020-3189 is a high (CVSS 8.6) Uncontrolled Resource Consumption vulnerability in cisco asa_5505_firmware. EPSS estimates a 1.86% chance of exploitation in the next 30 days, higher than 78.8% of scored vulnerabilities.
Timeline
- 06-05-2020PublishedVulnerability first disclosed.
- 15-11-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system memory over time, which can cause unexpected system behaviors or device crashes. The vulnerability is due to the system memory not being properly freed for a VPN System Logging event generated when a VPN session is created or deleted. An attacker could exploit this vulnerability by repeatedly creating or deleting a VPN tunnel connection, which could leak a small amount of system memory for each logging event. A successful exploit could allow the attacker to cause system memory depletion, which can lead to a systemwide denial of service (DoS) condition. The attacker does not have any control of whether VPN System Logging is configured or not on the device, but it is enabled by default.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST8.6HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS trend
Probability
1.86%
Chance of exploitation in the next 30 days
Percentile
79%
Versus all other CVEs
30-day change
+0.06 pp
From 1.80% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.
- CWE-401Missing Release of Memory after Effective LifetimeThe product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Affected systems
Cisco14 products
- asa_5505_firmware9.9\(2\) | 9.9\(2.21\) | 9.9\(2.52\) | 9.9\(2.55\)
- asa_5510_firmware9.9\(2\) | 9.9\(2.21\) | 9.9\(2.52\) | 9.9\(2.55\)
- asa_5512-x_firmware9.9\(2\) | 9.9\(2.21\) | 9.9\(2.52\) | 9.9\(2.55\)
- asa_5515-x_firmware9.9\(2\) | 9.9\(2.21\) | 9.9\(2.52\) | 9.9\(2.55\)
- asa_5520_firmware9.9\(2\) | 9.9\(2.21\) | 9.9\(2.52\) | 9.9\(2.55\)
1 vendor · 14 products
References
1 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-Rdpe34sd8Vendor AdvisoryX Refsource CISCO