A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper memory protection mechanisms while processing certain OSPF packets. An attacker could exploit this vulnerability by sending a series of malformed OSPF packets in a short period of time to an affected device. A successful exploit could allow the attacker to cause a reload of the affected device, resulting in a DoS condition for client traffic that is traversing the device.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

根據其自我報告的版本，Cisco Firepower Threat Defense (FTD) 受到 Open Shortest Path First (OSPF) 實作中一個弱點影響。未經驗證的遠端攻擊者可惡意利用此弱點，透過傳送格式錯誤的封包造成裝置停止回應。

如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告

根據其自我報告的版本，Cisco ASA 軟體受到 Open Shortest Path First (OSPF) 實作中一個弱點影響。未經驗證的遠端攻擊者可惡意利用此弱點，透過傳送格式錯誤的封包造成裝置停止回應。

如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告

根据其自我报告的版本，Cisco ASA 软件受到开放式最短路径优先 (OSPF) 实现中的漏洞影响。未经身份验证的远程攻击者可利用此问题，通过发送格式错误的数据包，导致设备停止响应。

请参阅随附的 Cisco BID 和 Cisco 安全公告，了解更多信息

根据其自我报告的版本，Cisco Firepower 威胁防御 (FTD) 受到开放式最短路径优先 (OSPF) 实现中的漏洞影响。未经身份验证的远程攻击者可利用此问题，通过发送格式错误的数据包，导致设备停止响应。

请参阅随附的 Cisco BID 和 Cisco 安全公告，了解更多信息

自己報告されたバージョンによると、Cisco ASAソフトウェアは、Open Shortest Path First（OSPF）実装における脆弱性の影響を受けます。認証されていないリモートの攻撃者がこれを悪用し、不正な形式のパケットを送信してデバイスの応答を停止させる可能性があります。

詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください

自己報告されたバージョンによると、Cisco Firepower Threat Defense（FTD）は、Open Shortest Path First（OSPF）実装における脆弱性の影響を受けます。認証されていないリモートの攻撃者がこれを悪用し、不正な形式のパケットを送信してデバイスの応答を停止させる可能性があります。

詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください

According to its self-reported version, Cisco Firepower Threat Defense (FTD) is affected by a vulnerability in the Open Shortest Path First (OSPF) implementation. An unauthenticated, remote attacker can exploit this by sending malformed packets to cause the device to stop responding.

Please see the included Cisco BIDs and Cisco Security Advisory for more information

According to its self-reported version, Cisco ASA Software is affected by a vulnerability in the Open Shortest Path First (OSPF) implementation. An unauthenticated, remote attacker can exploit this by sending malformed packets to cause the device to stop responding.

Please see the included Cisco BIDs and Cisco Security Advisory for more information

ID	Name	Product	Family	Published	Updated	Severity
506069	Cisco ASA Out-of-bounds Read (CVE-2020-3298)	Tenable OT Security	Tenable.ot	10/5/2026	10/6/2026	high
138893	Cisco Firepower Threat Defense (FTD) 軟體 DoS (cisco-sa-asa-ftd-ospf-dos-RhMQY8qx)	Nessus	CISCO	7/24/2020	3/31/2023	high
138892	Cisco ASA DoS (cisco-sa-asa-ftd-ospf-dos-RhMQY8qx)	Nessus	CISCO	7/24/2020	3/31/2023	high
138892	Cisco ASA 拒绝服务漏洞 (cisco-sa-asa-ftd-ospf-dos-RhMQY8qx)	Nessus	CISCO	7/24/2020	3/31/2023	high
138893	Cisco Firepower 威胁防御 (FTD) 软件拒绝服务漏洞 (cisco-sa-asa-ftd-ospf-dos-RhMQY8qx)	Nessus	CISCO	7/24/2020	3/31/2023	high
138892	Cisco ASAにおけるDoS（cisco-sa-asa-ftd-ospf-dos-RhMQY8qx）	Nessus	CISCO	7/24/2020	3/31/2023	high
138893	Cisco Firepower Threat Defense（FTD）ソフトウェアにおけるDoS（cisco-sa-asa-ftd-ospf-dos-RhMQY8qx）	Nessus	CISCO	7/24/2020	3/31/2023	high
138893	Cisco Firepower Threat Defense (FTD) Software DoS (cisco-sa-asa-ftd-ospf-dos-RhMQY8qx)	Nessus	CISCO	7/24/2020	3/31/2023	high
138892	Cisco ASA DoS (cisco-sa-asa-ftd-ospf-dos-RhMQY8qx)	Nessus	CISCO	7/24/2020	3/31/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high