CVE-2026-20023
Analyzed Analyzed - Analysis Complete

Memory Corruption in Cisco ASA OSPF Causes DoS

Publication date: 2026-03-04

Last updated on: 2026-08-11

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to corrupt memory on an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to memory corruption when parsing OSPF protocol packets. An attacker could exploit this vulnerability by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to cause memory corruption causing the affected device to reboot, resulting in a DoS condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-04
Last Modified
2026-08-11
Generated
2026-08-16
AI Q&A
2026-03-04
EPSS Evaluated
2026-08-14
NVD
CVE-2026-20023
EUVD
EUVD-2026-9480

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cisco secure_firewall_threat_defense 7.7.10.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the OSPF protocol implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software.

It occurs due to memory corruption when the affected device parses OSPF protocol packets.

An unauthenticated attacker who is adjacent to the device can exploit this by sending specially crafted OSPF packets, which can corrupt memory and cause the device to reboot.

This results in a denial of service (DoS) condition on the affected device.

Detection Guidance

I don't know

Impact Analysis

Exploitation of this vulnerability can cause the affected Cisco firewall device to reboot unexpectedly.

This leads to a denial of service (DoS) condition, potentially disrupting network security and connectivity.

Since the attacker does not require authentication and only needs to be adjacent, the risk of disruption is significant in environments using these devices.

Compliance Impact

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20023. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart