CVE:CVE-2020-3186
CNNVD:CNNVD-202005-199
Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。
Cisco FTD 6.3.0版本、6.4.0版本和6.5.0版本中存在访问控制错误漏洞，该漏洞源于配置了不同的管理访问列表，一个访问列表中所允许访问的端口在另一个访问列表中则被禁止。攻击者可通过将特制的远程管理流量发送到受影响系统的本地IP地址利用该漏洞绕过已配置的管理接口访问列表。
solution:Upgrade cisco firepower_threat_defense to a higher version than 6.3.0.6,6.4.0.7,6.5.0.2,and avoid the version [6.3.0,6.3.0.6),[6.4.0,6.4.0.7),[6.5.0,6.5.0.2); Upgrade cisco asa_5505_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5510_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5512-x_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5515-x_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5520_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5525-x_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5540_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5545-x_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5550_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5555-x_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5580_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16); Upgrade cisco asa_5585-x_firmware to a higher version than 9.12(1.6,201.5(23.16,and avoid the version 9.12(1.6),201.5(23.16)