AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-3125

CRITICAL · CVSS 9.8 EPSS 2.36% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-05-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2020-3125
Severity
CRITICAL
CVSS
9.8
EPSS
2.36%
Cisco

Original NVD Description

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured to perform Kerberos authentication for VPN or local device access. The vulnerability is due to insufficient identity verification of the KDC when a successful authentication response is received. An attacker could exploit this vulnerability by spoofing the KDC server response to the ASA device. This malicious response would not have been authenticated by the KDC. A successful attack could allow an attacker to bypass Kerberos authentication.