Product:
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
Summary
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to heap corruption in OSPF when parsing packets. An attacker could exploit this vulnerability by sending crafted packets to the OSPF service.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.8 | CVE-2026-20024 |
Exploitation
To exploit this vulnerability, an attacker must have the OSPF secret key and be on an adjacent network. By sending specially crafted packets to the OSPF service, the attacker can corrupt the heap, leading to an unexpected device reload and a denial of service condition.
Affected Products
- Cisco Secure Firewall ASA Software: Vulnerable to OSPF protocol exploitation leading to potential DoS.
- Cisco Secure FTD Software: Also affected by the same OSPF vulnerability, allowing for similar exploitation.
Mitigation
To mitigate this vulnerability, it is recommended to restrict access to the OSPF service and ensure that only trusted devices can communicate with it. Additionally, applying the latest security patches from Cisco can help protect against this and other vulnerabilities.