CVE-2020-3548

Summary

CVE-2020-3548 is a denial-of-service vulnerability affecting the Transport Layer Security (TLS) protocol implementation in Cisco Email Security Appliance (ESA) software based on AsyncOS. An unauthenticated remote attacker can exploit this issue by sending a series of specially crafted TLS packets, leading to high CPU usage and degraded performance on the affected device. The cause of this vulnerability is inefficient processing of incoming TLS traffic. Unfortunately, there are currently no workarounds available to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.