PT-2022-2506 · Cisco · Cisco Ftd

Published 2022-04-27 · Updated 2023-06-27 · CVE-2022-20748

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the local malware analysis process could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This issue is due to insufficient error handling in the local malware analysis process. An attacker could exploit this by sending a crafted file through the device, causing the local malware analysis process to crash and resulting in a DoS condition. Manual intervention may be required to recover from this situation. Malware cloud lookup and dynamic analysis will not be impacted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-664

Related Identifiers

BDU:2022-02916

CVE-2022-20748

Affected Products

Cisco Ftd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-20748 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-amp-local-dos-CUfwRJXT · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20748 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02916 · Security Note