/
← Voltar ao feed
high

Cisco ASA and FTD syslog 419002 rate-limiting flaw (CVE-2026-20154) allows unauthenticated remote DoS via SYN flood

1 fonte(s) · 1 atualização(ões) · publicado 18/09/2026 12:50 · coletado há 4 dias

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco disclosed CVE-2026-20154, a high-severity vulnerability in the system rate-limiting process for syslog message 419002 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. An unauthenticated, remote attacker can cause high CPU utilization on an affected device, resulting in performance degradation and a denial of service (DoS) condition. Cisco has released software updates, and workarounds are available. The advisory does not report active exploitation. It is part of the Cisco September 16, 2026 advisory publication group.

Detalhes técnicos

  • The root cause is improper rate limiting for syslog message 419002.
  • An attacker exploits it by sending a flood of TCP synchronization (SYN) packets to an affected device.
  • Successful exploitation drives high CPU utilization and degrades performance.
  • Cisco rates the Security Impact as High.

Remediação

  • Apply the Cisco software updates that address the vulnerability.
  • Where patching is not immediately possible, use the workarounds described in advisory cisco-sa-asa-ftd-logging-dos-ZXXNesfN.
  • See also the Cisco Secure Firewall ASA, FTD and FMC Hardening Release of September 2026 for related fixes and improvements.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 18/09/2026 12:50 · coletado 19/10 18:02 primeiro registro só resumo do feed

    Cisco ASA and FTD syslog 419002 rate-limiting flaw (CVE-2026-20154) allows unauthenticated remote DoS via SYN flood

    ler a análise desta fonte

    Cisco disclosed CVE-2026-20154, a high-severity vulnerability in the system rate-limiting process for syslog message 419002 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. An unauthenticated, remote attacker can cause high CPU utilization on an affected device, resulting in performance degradation and a denial of service (DoS) condition. Cisco has released software updates, and workarounds are available. The advisory does not report active exploitation. It is part of the Cisco September 16, 2026 advisory publication group.

    Technical Details

    • The root cause is improper rate limiting for syslog message 419002.
    • An attacker exploits it by sending a flood of TCP synchronization (SYN) packets to an affected device.
    • Successful exploitation drives high CPU utilization and degrades performance.
    • Cisco rates the Security Impact as High.

    Remediation

    • Apply the Cisco software updates that address the vulnerability.
    • Where patching is not immediately possible, use the workarounds described in advisory cisco-sa-asa-ftd-logging-dos-ZXXNesfN.
    • See also the Cisco Secure Firewall ASA, FTD and FMC Hardening Release of September 2026 for related fixes and improvements.