PT-2021-7098 · Cisco · Cisco Ftd

Published 2021-11-02 · Updated 2022-05-13 · CVE-2022-20746

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software versions prior to 6.6.5.2 Cisco Firepower Threat Defense (FTD) Software versions prior to 7.1.0.1

Description A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit this vulnerability by sending a crafted stream of TCP traffic through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Recommendations For Cisco Firepower Threat Defense (FTD) Software version prior to 6.6.5.2, update to version 6.6.5.2 or later. For Cisco Firepower Threat Defense (FTD) Software version prior to 7.1.0.1, update to version 7.1.0.1 or later. As a temporary workaround, consider restricting access to the TCP proxy functionality until a patch is available.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2022-03333

CVE-2022-20746

Affected Products

Cisco Ftd

References · 7

• https://bdu.fstec.ru/vul/2022-03333 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20746 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-kM9SHhOu · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20746 · Security Note
• https://vuldb.com/?id.198877 · Note
• https://cybersecurity-help.cz/vdb/SB2022042813 · Note
• https://t.me/true_secator/2906 · Telegram Post