UpHeron
All vulnerabilities

Servers and applications

CVE-2020-3125

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured to perform Kerberos authentication for VPN or local device access. The vulnerability is due to insufficient identity…

Severity
Critical 9.8
Published
6 May 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.8.4.15, 9.9.2.66, 9.10.1.37, 9.12.3.2, 9.13.1.7
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.8 before 9.8.4.15
  • From 9.9 before 9.9.2.66
  • From 9.10 before 9.10.1.37
  • From 9.12 before 9.12.3.2
  • From 9.13 before 9.13.1.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-3125
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-3125