CVE-2026-20023
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated adjacent attacker to corrupt memory on an affected device, resulting in a DoS condition. This is due to memory corruption when parsing OSPF protocol packets.
Risk Assessment
An attacker can send crafted OSPF packets, causing memory corruption and device reboot, leading to service disruption.
Recommendation
Install Cisco updates. Restrict access to the OSPF network and monitor OSPF traffic for anomalies.
Other vulnerabilities in Cisco Secure Firewall
See all- CVE-2026-20022Medium
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated adjacent attacker to cause an unexpected device reload, resulting in a DoS condition when OSPF canonicalization debug is enabled. This is due to insufficient input validation when processing OSPF LSU packets.
- CVE-2026-20008Medium
A vulnerability in a subset of CLI commands on Cisco Secure Firewall ASA and FTD Software allows an authenticated local attacker with administrator privileges to craft Lua code that could be used on the underlying operating system as root. This exists because user-provided input is not properly sanitized.
Original NVD description (English source)
A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to corrupt memory on an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to memory corruption when parsing OSPF protocol packets. An attacker could exploit this vulnerability by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to cause memory corruption causing the affected device to reboot, resulting in a DoS condition.