What’s Vulnerable › Vulnerabilities

CVE-2020-3312: Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-06 · updated 2026-06-17
• Weakness: CWE-284

Description

A vulnerability in the application policy configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data on an affected device. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data.

Affected products

• Cisco Firepower Management Center: 6.2.3, 6.2.3.10, 6.3.0, 6.4.0, 6.5.0

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-infodis-kZxGtUJD
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-infodis-kZxGtUJD

Get alerted when CVE-2020-3312 or the next vulnerability affects your stack