CVE-2020-3259Vulnerability
Cisco ASA and FTD Information Disclosure Vulnerability
Reported by 3 independent sources · first reported by GreyNoise · last reported
Last reported 2 days ago
Fix due 7 Mar 2024
Used by ransomware: knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
3 reports, newest first · the exact sentence from each-
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More“Attacks involve the exploitation of known security flaws in edge device products and internet-exposed products (CVE-2020-3259, CVE-2023-20269, CVE-2023-27532, CVE-2024-40711, and CVE-2024-40766) or, alternatively, credential exposure and brute-force password attacks, for initial…”
-
#StopRansomware: SafePay Ransomware“CVE-2020-3259 [Common Weakness Enumeration (CWE)-200: Exposure of Sensitive Information to an Unauthorized Actor]”
-
25,000 IPs Scanned Cisco ASA Devices — New Vulnerability Potentially Incoming“Cisco ASA CVE-2020-3259 Information Disclosure Attempt”
Indicators reported together
named in the same reports- 173.194.194[.]94in 1 report
- a0dc80a37eb7e271…ed228d9ff526in 1 report
- bbdd3620a67aedec…02a6f4bc6f41in 1 report
- 119.13.79[.]145in 1 report
- 210.242.76[.]32in 1 report
- 211.20.144[.]116in 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2024-40766, CVE-2023-27532, CVE-2023-20269, CVE-2024-40711, CVE-2024-4577, CVE-2025-20333, CVE-2025-20362, CVE-2022-47945, CVE-2020-3452, CVE-2021-41773
Thanks — we review every report.