PT-2022-5685 · Cisco · Cisco Ftd

Published 2022-11-09 · Updated 2024-01-25 · CVE-2022-20940

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the TLS handler could allow an unauthenticated, remote attacker to gain access to sensitive information. This issue is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses SSL decryption policies. An attacker could exploit this by sending crafted TLS messages to an affected device, which would act as an oracle and allow the attacker to carry out a chosen-ciphertext attack. A successful exploit could allow the attacker to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions to the affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

BDU:2022-07080

CVE-2022-20940

Affected Products

Cisco Ftd

References · 6

• https://osv.dev/vulnerability/CVE-2022-20940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20940 · Security Note
• https://bdu.fstec.ru/vul/2022-07080 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-bb-rCgtmY2 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-bb-rCgtmY2 · Note
• https://t.me/cvenotify/37811 · Telegram Post