CVE:CVE-2020-3188
CNNVD:CNNVD-202005-203
Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。
Cisco FTD 6.4.0.9之前版本和6.5.0.5之前版本中会话超时（用于管理连接）的处理方法存在资源管理错误漏洞。攻击者可通过向受影响的设备持续发送大量特制远程管理连接利用该漏洞导致远程管理界面或Cisco Firepower Threat Defense停止响应，并使其他管理功能脱机，从而导致拒绝服务。
solution:Upgrade cisco firepower_threat_defense to a higher version than 6.4.0.9,6.5.0.5,and avoid the version [6.4.0,6.4.0.9),[6.5.0,6.5.0.5); Upgrade cisco asa_5505_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5510_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5512-x_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5515-x_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5520_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5525-x_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5540_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5545-x_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5550_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5555-x_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5580_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96); Upgrade cisco asa_5585-x_firmware to a higher version than 9.8(3,101.6(1.96,and avoid the version 9.8(3),101.6(1.96)