onyx --cves cve-2020-27124
CVE-2020-27124
- score
- <0.1
- cvss
- 8.6
- epss
- 0.9%
- published
- 2024-11-18
- kev added
- —
- first seen
Cisco ASA Software contains a denial of service caused by improper error handling on SSL/TLS connections, letting unauthenticated remote attackers cause device reload, exploit requires establishing an SSL/TLS connection and sending malicious messages.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 3
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-dos-7uZWwSEy
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-bLZw4Ctq
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sa-rv-routers-xss-K7Z5U6q3