What is CVE-2020-3580?

CVE-2020-3580 is a medium-severity vulnerability affecting the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software. This vulnerability could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users of the web services interface on affected devices. The systems impacted include specific configurations of Cisco ASA and FTD Software, which are commonly used for network security and threat management.

Who is impacted by this?

The CVE-2020-3580 vulnerability affects users of the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with specific AnyConnect and WebVPN configurations. Impacted versions include Cisco FTD Software up to 6.3.0.6, 6.4.0 to 6.4.0.10, 6.5.0 to 6.5.0.5, and 6.6.0 to 6.6.1. For Cisco ASA Software, affected versions range from 9.7 to 9.8.4.29, 9.9 to 9.9.2.80, 9.10 to 9.10.1.44, 9.12 to 9.12.4.4, 9.13 to 9.13.1.13, and 9.14 to 9.14.1.30.

What to do if CVE-2020-3580 affected you

If you're affected by the CVE-2020-3580 vulnerability, it's important to take action to protect your systems. Follow these simple steps:

1. Identify affected devices running Cisco ASA or FTD Software.

2. Check for available software updates and apply them as recommended by Cisco.

3. Consider implementing additional security measures, such as network segmentation or isolation of affected assets.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability (CVE-2020-3580) is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on November 3, 2021, and the due date for remediation is May 3, 2022. The required action is to apply updates as per the vendor's instructions.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-79, which involves improper neutralization of input during web page generation, leading to cross-site scripting attacks.

Learn More

To better understand the vulnerability's impact and mitigation strategies, consult the NVD page and the resources listed below.

• Cisco Security Advisory

• BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities

• Known Exploited Vulnerabilities Catalog