CVE-2020-3186
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list. The issue is due to inconsistent configuration of access lists. An attacker could send crafted remote management traffic to the local IP address, bypassing the policies.
Risk Assessment
Bypassing management access lists could allow unauthorized access to the management interface, potentially compromising system integrity and confidentiality.
Recommendation
It is recommended to update FTD software to patched versions and review access list configurations to ensure consistency.
Original NVD description (English source)
A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the configuration of different management access lists, with ports allowed in one access list and denied in another. An attacker could exploit this vulnerability by sending crafted remote management traffic to the local IP address of an affected system. A successful exploit could allow the attacker to bypass the configured management access list policies, and traffic to the management interface would not be properly denied.