PT-2023-7127 · Cisco · Cisco Ftd

CVE-2023-20070 · Publicado 2023-10-27 · Atualizado 2024-01-25

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description The issue is related to a logic error in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software, specifically in how memory allocations are handled during a TLS 1.3 session. This could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart by sending a crafted TLS 1.3 message sequence through an affected device. A successful exploit could result in a denial of service (DoS) condition, causing packets to be dropped while the Snort detection engine reloads. The Snort detection engine will restart automatically without requiring manual intervention.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Enumeração de Fraquezas

CWE-840

CWE-244

CWE-404

Identificadores relacionados

BDU:2023-08154

CVE-2023-20070

Produtos afetados

Cisco Ftd

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-20070 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-uAnUntcV · Aviso do Fabricante
• https://vuldb.com/ru/?id.244255 · Nota
• https://bdu.fstec.ru/vul/2023-08154 · Nota de Segurança
• https://t.me/cibsecurity/73378 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-20070 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1719768439781200135 · Publicação no Twitter
• https://cybersecurity-help.cz/vdb/SB2023110220 · Nota