CVE-2020-3285 Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2020-3285?
CVE-2020-3285 is a medium-severity vulnerability in Cisco Secure Firewall Threat Defense, published on 6 May 2020.
Official description
A vulnerability in the Transport Layer Security version 1.3 (TLS 1.3) policy with URL category functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured TLS 1.3 policy to block traffic for a specific URL. The vulnerability is due to a logic error with Snort handling of the connection with the TLS 1.3 policy and URL category configuration. An attacker could exploit this vulnerability by sending crafted TLS 1.3 connections to an affected device. A successful exploit could allow the attacker to bypass the TLS 1.3 policy and access URLs that are outside the affected device and normally would be dropped.
Weakness: CWE-693
Which versions are affected by CVE-2020-3285?
It affects 1 product.
Products include Cisco Secure Firewall Threat Defense.
How do I fix CVE-2020-3285?
No fix has been published for CVE-2020-3285 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-3285 being exploited?
There is no known exploitation of CVE-2020-3285 in the wild and no public exploit code.
Other vulnerabilities in Cisco Secure Firewall Threat Defense
- CVE-2024-20412 Hardcoded credentials in Cisco Firepower Threat Defense Software
- CVE-2024-20330 Memory corruption in Cisco Firepower Threat Defense Software
- CVE-2024-20339 Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability
- CVE-2024-20351 Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability
- CVE-2023-20083 Denial of service in Cisco Firepower Threat Defense Software
Sources
Also known as GHSA-4fxx-mff3-3wwr.