Cisco Secure Firewall Adaptive Security Appliance Software OSPF Protocol memory corruption

Summaryinfo

A vulnerability labeled as critical has been found in Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software. Affected is an unknown function of the component OSPF Protocol Handler. Executing a manipulation can lead to memory corruption. This vulnerability is registered as CVE-2026-20024. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software (the affected version unknown). It has been declared as critical. This vulnerability affects an unknown part of the component OSPF Protocol Handler. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect availability. CVE summarizes:

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key. This vulnerability is due to heap corruption in OSPF when parsing packets. An attacker could exploit this vulnerability by sending crafted packets to the OSPF service. A successful exploit could allow the attacker to corrupt the heap, causing the affected device to reload, resulting in a DoS condition.

The advisory is shared for download at sec.cloudapps.cisco.com. This vulnerability was named CVE-2026-20024 since 10/08/2025. The exploitation appears to be easy. The attack needs to be done within the local network. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 05/05/2026).

Upgrading eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• Cisco

Name

• Secure Firewall Adaptive Security Appliance Software
• Secure Firewall Threat Defense Software

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion