PT-2021-7088 · Cisco · Cisco Ftd

Published 2021-11-02 · Updated 2022-05-12 · CVE-2022-20730

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This issue is due to incorrect feed update processing. An attacker could exploit this by sending traffic through an affected device that should be blocked. A successful exploit could allow the attacker to bypass device controls and send traffic to devices expected to be protected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-241

Related Identifiers

BDU:2022-03260

CVE-2022-20730

Affected Products

Cisco Ftd

References · 6

• https://bdu.fstec.ru/vul/2022-03260 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-sidns-bypass-3PzA5pO · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20730 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20730 · Vendor Advisory
• https://vuldb.com/?id.198875 · Note
• https://cybersecurity-help.cz/vdb/SB2022042815 · Note