CVE-2020-3548

A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient processing of incoming TLS traffic. An attacker could exploit this vulnerability by sending a series of crafted TLS packets to an affected device. A successful exploit could allow the attacker to trigger a prolonged state of high CPU utilization. The affected device would still be operative, but response time and overall performance may be degraded.There are no workarounds that address this vulnerability.

• CWE-407

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-tls-dos-xW53TBhbVendor Advisory

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35474In MediaWiki before 1.35.1, the combination of Html::rawElem…6.1
• CVE-2020-35475In MediaWiki before 1.35.1, the messages userrights-expiry-c…7.5
• CVE-2020-35476A remote code execution vulnerability occurs in OpenTSDB thr…9.8
• CVE-2020-35477MediaWiki before 1.35.1 blocks legitimate attempts to hide l…5.3
• CVE-2020-35478MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php…6.1
• CVE-2020-35479MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php…6.1
• CVE-2020-35480An issue was discovered in MediaWiki before 1.35.1. Missing …5.3
• CVE-2020-35481SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro…9.8
• CVE-2020-35482SolarWinds Serv-U before 15.2.2 allows authenticated reflect…5.4
• CVE-2020-35483AnyDesk before 6.1.0 on Windows, when run in portable mode o…7.8
• CVE-2020-35488The fileop module of the NXLog service in NXLog Community Ed…7.5
• CVE-2020-35489The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 …10