CNNVD-202508-1681 Information

CNNVD ID

CNNVD-202508-1681

CVE-2025-20127

  • CNNVD Published: 2025-08-14

Description (Chinese)

Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense都是美国思科(Cisco)公司的产品。Cisco Secure Firewall Adaptive Security Appliance是一个企业级防火墙软件。Cisco Secure Firewall Threat Defense是一个集成式防火墙平台。 Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense存在安全漏洞,该漏洞源于TLS 1.3实现中的特定密码导致资源消耗,可能导致拒绝服务。

Description (English)

Cisco Security Fairive Security Application and Cisco Security Fairwall Threat Defense are all Cisco products. Cisco Security Firewall Adaptive Security Application is an enterprise-level firewall software. Cisco Security Firewall Threat Defense is an integrated firewall platform. There is a security loophole between Cisco Security Fairive Security Application and Cisco Security Fairwall Threat Defense, which stems from resource consumption resulting from specific passwords being achieved in TLS 1.3, which may lead to the denial of services.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

思科

Published

2025-08-14

Last Modified

2026-02-24

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-3100_4200_tlsdos-2yNSCd54 https://nvd.nist.gov/vuln/detail/CVE-2025-20127

Patch

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-3100_4200_tlsdos-2yNSCd54

Share on: