[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBIeL-HmUorgSMe_fTRt6-reYp4Sijyj6OSE9iJ5GBYE":3,"g5a-ex:cisco\u002Fasa_5520_firmware@*":164,"g5a-family:cisco\u002Fasa_5520_firmware":166},{"success":4,"data":5},true,{"product":6,"versions":68,"topVulnerabilitiesByEpss":94,"kevVulnerabilities":141,"seoMetadata":142,"meta":161},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":67},"cisco","asa_5520_firmware",25,14,0,"2020-05-06",[14,18,20,22,24,26,28,30,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"100.13\\(0\\)",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"101.5\\(1.26\\)",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"101.6\\(1.96\\)",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"201.4\\(1.21\\)",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"201.5\\(23.16\\)",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"8.4\\(1\\)",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"9.10\\(1.220\\)",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"9.10\\(1.3\\)",2,{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"9.12\\(0.61\\)",{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},"9.12\\(1.6\\)",{"version":38,"cve_count":16,"kev_count":11,"has_kev":17},"9.12\\(2\\)",{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},"9.12\\(2.12\\)",{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},"9.13\\(0.33\\)",{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},"9.4\\(1\\)",{"version":46,"cve_count":16,"kev_count":11,"has_kev":17},"9.4\\(4\\)",{"version":48,"cve_count":16,"kev_count":11,"has_kev":17},"9.6\\(4\\)",{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},"96.4\\(0.42\\)",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"9.8\\(2.20\\)",{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},"9.8\\(3\\)",{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},"9.8\\(4.18\\)",{"version":58,"cve_count":32,"kev_count":11,"has_kev":17},"9.9\\(2\\)",{"version":60,"cve_count":16,"kev_count":11,"has_kev":17},"9.9\\(2.21\\)",{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},"9.9\\(2.4\\)",{"version":64,"cve_count":16,"kev_count":11,"has_kev":17},"9.9\\(2.52\\)",{"version":66,"cve_count":16,"kev_count":11,"has_kev":17},"9.9\\(2.55\\)","Asa 5520 Firmware by Cisco is a technology product with 25 tracked versions and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},{"version":38,"cve_count":16,"kev_count":11,"has_kev":17},{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},{"version":46,"cve_count":16,"kev_count":11,"has_kev":17},{"version":48,"cve_count":16,"kev_count":11,"has_kev":17},{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},{"version":58,"cve_count":32,"kev_count":11,"has_kev":17},{"version":60,"cve_count":16,"kev_count":11,"has_kev":17},{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},{"version":64,"cve_count":16,"kev_count":11,"has_kev":17},{"version":66,"cve_count":16,"kev_count":11,"has_kev":17},[95,102,107,113,118,122,126,130,133,137],{"cveId":96,"description":97,"publishedDate":12,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":17,"epssScore":101},"CVE-2020-3187","A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted system. The vulnerability is due to a lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences. An exploit could allow the attacker to view or delete arbitrary files on the targeted system. When the device is reloaded after exploitation of this vulnerability, any files that were deleted are restored. The attacker can only view and delete files within the web services file system. This file system is enabled when the affected device is configured with either WebVPN or AnyConnect features. This vulnerability can not be used to obtain access to ASA or FTD system files or underlying operating system (OS) files. Reloading the affected device will restore all files within the web services file system.",9.1,"v3.1","Critical",0.96595,{"cveId":103,"description":104,"publishedDate":12,"cvssScore":105,"cvssVersion":99,"severity":100,"isKev":17,"epssScore":106},"CVE-2020-3125","A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured to perform Kerberos authentication for VPN or local device access. The vulnerability is due to insufficient identity verification of the KDC when a successful authentication response is received. An attacker could exploit this vulnerability by spoofing the KDC server response to the ASA device. This malicious response would not have been authenticated by the KDC. A successful attack could allow an attacker to bypass Kerberos authentication.",9.8,0.02417,{"cveId":108,"description":109,"publishedDate":12,"cvssScore":110,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":112},"CVE-2020-3283","A vulnerability in the Secure Sockets Layer (SSL)\u002FTransport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000 Series platform could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to a communication error between internal functions. An attacker could exploit this vulnerability by sending a crafted SSL\u002FTLS message to an affected device. A successful exploit could allow the attacker to cause a buffer underrun, which leads to a crash. The crash causes the affected device to reload.",8.6,"High",0.02021,{"cveId":114,"description":115,"publishedDate":12,"cvssScore":116,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":117},"CVE-2020-3179","A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory handling error when GRE over IPv6 traffic is processed. An attacker could exploit this vulnerability by sending crafted GRE over IPv6 packets with either IPv4 or IPv6 payload through an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition.",7.5,0.02,{"cveId":119,"description":120,"publishedDate":12,"cvssScore":116,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":121},"CVE-2020-3254","Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerabilities are due to inefficient memory management. An attacker could exploit these vulnerabilities by sending crafted MGCP packets through an affected device. An exploit could allow the attacker to cause memory exhaustion resulting in a restart of an affected device, causing a DoS condition for traffic traversing the device.",0.01983,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":110,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":121},"CVE-2019-15256","A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper management of system memory. An attacker could exploit this vulnerability by sending malicious IKEv1 traffic to an affected device. The attacker does not need valid credentials to authenticate the VPN session, nor does the attacker's source address need to match a peer statement in the crypto map applied to the ingress interface of the affected device. An exploit could allow the attacker to exhaust system memory resources, leading to a reload of an affected device.","2019-10-02",{"cveId":127,"description":128,"publishedDate":12,"cvssScore":116,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":129},"CVE-2020-3195","A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to incorrect processing of certain OSPF packets. An attacker could exploit this vulnerability by sending a series of crafted OSPF packets to be processed by an affected device. A successful exploit could allow the attacker to continuously consume memory on an affected device and eventually cause it to reload, resulting in a denial of service (DoS) condition.",0.01936,{"cveId":131,"description":132,"publishedDate":12,"cvssScore":110,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":129},"CVE-2020-3196","A vulnerability in the Secure Sockets Layer (SSL)\u002FTransport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust memory resources on the affected device, leading to a denial of service (DoS) condition. The vulnerability is due to improper resource management for inbound SSL\u002FTLS connections. An attacker could exploit this vulnerability by establishing multiple SSL\u002FTLS connections with specific conditions to the affected device. A successful exploit could allow the attacker to exhaust the memory on the affected device, causing the device to stop accepting new SSL\u002FTLS connections and resulting in a DoS condition for services on the device that process SSL\u002FTLS traffic. Manual intervention is required to recover an affected device.",{"cveId":134,"description":135,"publishedDate":12,"cvssScore":110,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":136},"CVE-2020-3191","A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper length validation of a field in an IPv6 DNS packet. An attacker could exploit this vulnerability by sending a crafted DNS query over IPv6, which traverses the affected device. An exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. This vulnerability is specific to DNS over IPv6 traffic only.",0.0188,{"cveId":138,"description":139,"publishedDate":12,"cvssScore":110,"cvssVersion":99,"severity":111,"isKev":17,"epssScore":140},"CVE-2020-3189","A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system memory over time, which can cause unexpected system behaviors or device crashes. The vulnerability is due to the system memory not being properly freed for a VPN System Logging event generated when a VPN session is created or deleted. An attacker could exploit this vulnerability by repeatedly creating or deleting a VPN tunnel connection, which could leak a small amount of system memory for each logging event. A successful exploit could allow the attacker to cause system memory depletion, which can lead to a systemwide denial of service (DoS) condition. The attacker does not have any control of whether VPN System Logging is configured or not on the device, but it is enabled by default.",0.01856,[],{"title":143,"metaDescription":144,"keywords":145,"structuredData":146},"Asa 5520 Firmware by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Asa 5520 Firmware by Cisco covering 25 versions with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Asa 5520 Firmware vulnerabilities, Asa 5520 Firmware security, Asa 5520 Firmware CVE, Cisco Asa 5520 Firmware, Asa 5520 Firmware threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":147,"@type":148,"name":149,"description":144,"url":150,"manufacturer":151,"applicationCategory":155,"softwareVersion":156,"mainEntity":157},"https:\u002F\u002Fschema.org","SoftwareApplication","Asa 5520 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fasa_5520_firmware",{"@type":152,"name":153,"url":154},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","25 versions tracked",{"@type":158,"name":159,"description":160,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Asa 5520 Firmware Security Vulnerabilities","Security vulnerabilities affecting Asa 5520 Firmware by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":162,"apiVersion":163},"2026-10-18T19:04:10.876Z","3.0",{"rows":165,"total":11,"capped":17,"failed":11},[],[]]