What is CVE-2020-3458?

CVE-2020-3458 is a medium-severity vulnerability in Cisco Adaptive_security_appliance_software, classified under Protection Mechanism Failure. CVSS score: 6.7/10. Published 2020-10-21.

How severe is CVE-2020-3458?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Cisco Adaptive_security_appliance_software

CVE-2020-3458

Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software for the Firepower 1000 Series and Firepower 2100 Series Appliances could allow an authentic…

EPSS: 0.003 (23.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Adaptive_security_appliance_software
Cisco Adaptive Security Appliance (Asa) Software — versions n/a
Cisco Firepower_1010
Cisco Firepower_1120
Cisco Firepower_1140
Cisco Firepower_1150
Cisco Firepower_2110
Cisco Firepower_2120
Cisco Firepower_2130
Cisco Firepower_2140

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3458?: CVE-2020-3458 is a medium-severity vulnerability in Cisco Adaptive_security_appliance_software, classified under Protection Mechanism Failure. CVSS score: 6.7/10. Published 2020-10-21.
How severe is CVE-2020-3458?: Medium severity. CVSS v3 base score is 6.7 out of 10.