CVE-2020-27124

A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause the affected device to reload unexpectedly, leading to a denial of service (DoS) condition. The vulnerability is due to improper error handling on established SSL/TLS connections. An attacker could exploit this vulnerability by establishing an SSL/TLS connection with the affected device and then sending a malicious SSL/TLS message within that connection. A successful exploit could allow the attacker to cause the device to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-457

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-dos-7uZWwSEyVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-bLZw4CtqNot Applicable
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sa-rv-routers-xss-K7Z5U6q3Not Applicable

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2710Vulnerability in the Oracle Banking Payments product of Orac…5.4
• CVE-2020-2711Vulnerability in the Oracle Banking Payments product of Orac…6.5
• CVE-2020-2712Vulnerability in the Oracle Banking Payments product of Orac…5.4
• CVE-2020-27121A vulnerability in Cisco Unified Communications Manager IM &…6.5
• CVE-2020-27122A vulnerability in the Microsoft Active Directory integratio…6.7
• CVE-2020-27123A vulnerability in the interprocess communication (IPC) chan…5.5
• CVE-2020-27125A vulnerability in Cisco Security Manager could allow an una…9.8
• CVE-2020-27126A vulnerability in an API of Cisco Webex Meetings could allo…6.1
• CVE-2020-27127Multiple vulnerabilities in Cisco Jabber for Windows, Jabber…9.9
• CVE-2020-27128A vulnerability in the application data endpoints of Cisco S…6.5
• CVE-2020-27129A vulnerability in the remote management feature of Cisco SD…6.7
• CVE-2020-2713Vulnerability in the Oracle Banking Payments product of Orac…7.1