Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability (CVE-2020-3580)
Severity: medium · Patch status: patched · Since 2021-11-03 · CVE-2020-3580
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information. CISA added CVE-2020-3580 to its Known Exploited Vulnerabilities catalog on Nov 3, 2021, which means attackers are exploiting it in the wild. CISA reports known use in ransomware campaigns.
What to do
- Apply updates per vendor instructions.
- US federal agencies must remediate by May 3, 2022 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
