Back to the CVE list
CVE-2020-3452 CISA KEV · Actively exploited

Improper input validation in Cisco Adaptive Security Appliance Software

CVSS score

7.5

EPSS probability

%100.0

Risk score

15.0

Published

6 y ago

OverviewPublic Exploits (17)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
curtishoughton/CVE-2020-3452-Cisco-Python-Scanner
GitHub

Safe Python scanner for CVE-2020-3452 (Cisco ASA/FTD WebVPN Directory Traversal)

Public PoCSource updated: 16.05.2026 22:53:53
G
abrewer251/CVE-2020-3452_Cisco_ASA_PathTraversal
GitHub

Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only.

Public PoCSource updated: 23.09.2025 18:07:17
G
Cappricio-Securities/CVE-2020-3452
GitHub

Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

Public PoCSource updated: 03.11.2025 15:23:28
G
cygenta/CVE-2020-3452
GitHub

cygenta/CVE-2020-3452

Public PoCSource updated: 28.01.2024 18:09:57
G
iveresk/cve-2020-3452
GitHub

Just proof of concept for Cisco CVE-2020-3452. Using external or internal file base.

Public PoCSource updated: 07.05.2022 09:47:56
G
Veids/CVE-2020-3452_auto
GitHub

Veids/CVE-2020-3452_auto

Public PoCSource updated: 10.01.2022 16:58:25
G
Aviksaikat/CVE-2020-3452
GitHub

Test vulnerability of CVE-2020-3452

Public PoCSource updated: 06.02.2023 13:44:50
G
darklotuskdb/CISCO-CVE-2020-3452-Scanner-Exploiter
GitHub

CISCO CVE-2020-3452 Scanner & Exploiter

Public PoCSource updated: 05.10.2026 08:58:53
G
sujaygr8/CVE-2020-3452
GitHub

sujaygr8/CVE-2020-3452

Public PoCSource updated: 14.06.2021 07:36:50
G
paran0id34/CVE-2020-3452
GitHub

CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense

Public PoCSource updated: 06.07.2022 09:55:04
E
Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2)
Exploit-DB

Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2)

Exploit referenceSource updated: 15.12.2020 00:00:00
E
Cisco ASA and FTD 9.6.4.42 - Path Traversal
Exploit-DB

Cisco ASA and FTD 9.6.4.42 - Path Traversal

Exploit referenceSource updated: 12.10.2020 00:00:00
E
Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion
Exploit-DB

Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion

Exploit referenceSource updated: 28.07.2020 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3452.yaml
Nuclei

Nuclei: Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

Exploit reference
N
http://packetstormsecurity.com/files/158647/Cisco-Adaptive-Security-Appliance-Software-9.11-Local-File-Inclusion.html
NVD reference

http://packetstormsecurity.com/files/158647/Cisco-Adaptive-Security-Appliance-Software-9.11-Local-File-Inclusion.html

Exploit reference
N
http://packetstormsecurity.com/files/159523/Cisco-ASA-FTD-9.6.4.42-Path-Traversal.html
NVD reference

http://packetstormsecurity.com/files/159523/Cisco-ASA-FTD-9.6.4.42-Path-Traversal.html

Exploit reference
N
http://packetstormsecurity.com/files/160497/Cisco-ASA-9.14.1.10-FTD-6.6.0.1-Path-Traversal.html
NVD reference

http://packetstormsecurity.com/files/160497/Cisco-ASA-9.14.1.10-FTD-6.6.0.1-Path-Traversal.html

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-3452"