Product:
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
Summary
A vulnerability in the OSPF protocol could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled. This vulnerability arises from insufficient input validation when processing OSPF LSU packets. An attacker could exploit this by sending crafted unauthenticated OSPF packets, leading to a device reload.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.1 | CVE-2026-20022 |
Exploitation
To exploit this vulnerability, an attacker on the adjacent network can send specially crafted OSPF LSU packets to the affected device. If the device has OSPF canonicalization debug enabled, the crafted packets can trigger a memory write outside of the intended data, causing the device to reload and resulting in a denial of service condition.
Affected Products
- Cisco Secure Firewall ASA Software: Vulnerable to OSPF protocol exploitation leading to DoS.
- Cisco Secure FTD Software: Susceptible to similar OSPF-related attacks causing device reloads.
Mitigation
To mitigate this vulnerability, it is recommended to disable OSPF canonicalization debug if it is not needed. Additionally, ensure that devices are updated to the latest software versions that address this vulnerability to prevent potential exploitation.