---
title: "Security digest: May 6, 2020"
url: https://erroneo.us/security/2020-05-06/
description: "May 6, 2020 vulnerability digest: 1 brief (Cisco ASA/FTD CVE-2020-3259: VPN Memory Leak…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2020-05-06
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: May 6, 2020

1 editorial brief.

## Take stock

- Check exposure: Cisco ASA/FTD CVE-2020-3259: VPN Memory Leak Used by Akira . Owners of Cisco ASA or FTD devices with AnyConnect SSL VPN, Clientless SSL VPN or AnyConnect IKEv2 client services that ran a release older than the fixed builds at any point while internet-facing.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Cisco ASA/FTD CVE-2020-3259: VPN Memory Leak Used by Akira](https://erroneo.us/security/briefs/cisco-asa-ftd-cve-2020-3259-memory-leak-akira/index.md): Fixed in 2020 but used for Akira ransomware entry years later; any ASA or FTD that ran a vulnerable build with AnyConnect or WebVPN enabled should be assumed to have leaked VPN credentials until those passwords are reset.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2020-05-06/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt