PT-2021-7010 · Cisco · Cisco Asa+1

Published 2021-11-02 · Updated 2022-05-13 · CVE-2022-20742

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software (affected versions not specified) Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description The issue is related to a flaw in the implementation of Galois/Counter Mode (GCM) ciphers in the IPsec VPN library, which could allow a remote attacker to gain unauthorized access to protected information through an IPsec IKEv2 VPN tunnel. An attacker in a man-in-the-middle position could exploit this by intercepting encrypted messages and using cryptanalytic techniques to break the encryption, potentially allowing them to decrypt, read, modify, and re-encrypt data transmitted across the affected VPN tunnel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-325

Related Identifiers

BDU:2022-02952

CVE-2022-20742

Affected Products

Cisco Asa

Cisco Ftd

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ipsec-mitm-CKnLr4 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ipsec-mitm-CKnLr4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02952 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20742 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20742 · Vendor Advisory