CVE-2020-3557— Cisco Firepower Management Center Software Denial of Service Vulnerability
Quick assessment
Affected
Cisco Cisco Firepower Management Center
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center (FMC) 存在安全漏洞，该漏洞源于不正确的证书验证。攻击者可利用该漏洞可以通过向受影响设备的主机输入守护进程发送精心设计的数据流来利用这个漏洞。成功利用该漏洞可以使攻击者可利用该漏洞导致主机输入守护进程重新启动。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-3557
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Management Center Software Denial of Service Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the host input API daemon of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted data stream to the host input daemon of the affected device. A successful exploit could allow the attacker to cause the host input daemon to restart. The attacker could use repeated attacks to cause the daemon to continuously reload, creating a DoS condition for the API.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Firepower Management Center 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center (FMC) 存在安全漏洞，该漏洞源于不正确的证书验证。攻击者可利用该漏洞可以通过向受影响设备的主机输入守护进程发送精心设计的数据流来利用这个漏洞。成功利用该漏洞可以使攻击者可利用该漏洞导致主机输入守护进程重新启动。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Management Center | n/a | - |
|
II. Public POCs for CVE-2020-3557
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3557
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-3557 (1)
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-dos-3WymYWKh vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2020-10-21 · 40 CVEs total
| CVE-2020-3456 | 8.8 HIGH | Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability |
| CVE-2020-3373 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragme |
| CVE-2020-3528 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Li |
| CVE-2020-3533 | 8.6 HIGH | Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability |
| CVE-2020-3572 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS S |
| CVE-2020-3529 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN D |
| CVE-2020-3514 | 8.2 HIGH | Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability |
| CVE-2020-3410 | 8.1 HIGH | Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulner |
| CVE-2020-3555 | 6.8 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denia |
| CVE-2020-3581 | 6.1 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2020-3582 | 6.1 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2020-3583 | 6.1 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2020-3599 | 6.1 MEDIUM | Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross- |
| CVE-2020-3580 | 6.1 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2020-3565 | 5.8 MEDIUM | Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability |
| CVE-2020-3585 | 5.3 MEDIUM | Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability |
| CVE-2020-3578 | 5.3 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Po |
| CVE-2020-3558 | 4.7 MEDIUM | Cisco Firepower Management Center Software Open Redirect Vulnerability |
| CVE-2020-3299 | Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability | |
| CVE-2020-3549 | Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel |
Showing top 20 of 40 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Firepower Management Center
-
CVE-2025-20220
Cisco Secure Firewall Management Center和Cisco Secure Firewal -
CVE-2025-20306
Cisco Secure Firewall Management Center Software Command Inj -
CVE-2025-20302
Cisco Secure Firewall Management Center Software Authorizati -
CVE-2025-20301
Cisco Secure Firewall Management Center Software Authorizati -
CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remo
Same vendor: Cisco
-
CVE-2026-20320
Cisco BroadWorks OCI解析器XEE漏洞 -
CVE-2026-20327
Cisco Unified Intelligence Center SQL Injection Vulnerabilit -
CVE-2026-20314
Cisco Packaged Contact Center Enterprise & Cisco Unified Con -
CVE-2026-20319
Cisco Secure Workload Software Security Hardening Release Au -
CVE-2026-20315
Cisco Secure Workload Software Security Hardening Release Au
Same weakness: CWE-295
-
CVE-2026-17024
Vulnerabilities in IBM AIX and PowerVM VIOS -
CVE-2026-53583
libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Ba -
CVE-2026-73253
Mongoose: TLS Hostname Verification Bypass via Overly Permis -
CVE-2026-73251
Mongoose Built-in TLS: CA-bundle certificate chain accepted -
CVE-2026-76403
Improper Certificate Validation through HTTP Event Collector
V. Comments for CVE-2020-3557
No comments yet