Product:
Cisco Secure Firewall ASA Software and Secure FTD Software
Summary
A vulnerability in the SAML 2.0 single sign-on feature could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability arises from insufficient error checking when processing SAML messages. An attacker could exploit this by sending crafted SAML messages to the SAML service.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.6 | CVE-2026-20101 |
Exploitation
To exploit this vulnerability, an attacker needs to send specially crafted SAML messages to the SAML service of the affected device. If successful, this could lead to an unexpected device reload, causing a denial of service condition.
Affected Products
- Cisco Secure Firewall ASA Software: Vulnerable to DoS due to SAML processing issues.
- Cisco Secure FTD Software: Also affected by the same SAML vulnerability leading to potential device reloads.
Mitigation
To mitigate this vulnerability, it is recommended to apply any available patches from Cisco and ensure that SAML message processing is properly configured to prevent unauthorized access.