Vulnerability

CERT-In Vulnerability Note CIVN-2026-0121
Multiple Vulnerabilities in CISCO

Original Issue Date:March 09, 2026

Severity Rating: HIGH

Software Affected

Cisco Secure Firewall ASA Software

Overview

Multiple vulnerabilities have been reported in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly, local attacker with administrative privileges in one context to copy files to or from another context, including configuration files.

Target Audience:
All IT administrators and individuals responsible for maintaining and updating in Software.

Risk Assessment:
High risk of data manipulation and service disruption.

Impact Assessment:
Potential impact on confidentiality, integrity, and availability of the system.

Description

1. Denial of service Vulnerability ( CVE-2026-20082 )

This vulnerability exists due to improper handling of new, incoming TCP connections that are destined to management or data interfaces when the device is under a TCP SYN flood attack. An attacker could exploit this vulnerability by sending a crafted stream of traffic to an affected device.
Successful exploitation of this vulnerability could allow the attacker to prevent all incoming TCP connections to the device from being established, including remote management access, Remote Access VPN (RAVPN) connections, and all network protocols that are TCP-based. This results in a denial of service (DoS) condition for affected features.

2. Unauthorized File Access Vulnerability ( CVE-2026-20062 )

This vulnerability exists due to improper access controls for Secure Copy Protocol (SCP) operations when the Cisco SSH stack is enabled. An attacker could exploit this vulnerability by authenticating to a non-admin context of the device and issuing crafted SCP copy commands in that non-admin context.
Successful exploitation of this vulnerability could allow the attacker to read, create, or overwrite sensitive files that belong to another context, including the admin and system contexts.

Solution

Apply appropriate updates as mentioned in Cisco Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE

Vendor Information

CISCO
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE

References

CVE Name
CVE-2026-20082
CVE-2026-20062

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India