PT-2026-23040

CVE-2026-20023

·

Published

2026-03-04

·

Updated

2026-05-04

Description by

CVSS 3.1
6.5
Medium
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)
Description A flaw exists in the OSPF protocol implementation of the software that could allow a remote, unauthenticated attacker to disrupt service. The issue stems from improper handling of OSPF protocol packets, leading to memory corruption. An attacker can exploit this by sending specially crafted OSPF packets to a vulnerable device. Successful exploitation may cause the device to reboot, resulting in a denial of service (DoS) condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾