PT-2022-6087 · Cisco · Cisco Asa+1

Published 2022-11-02 · Updated 2024-01-25 · CVE-2022-20947

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software (affected versions not specified) Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the dynamic access policies (DAP) functionality is due to improper processing of HostScan data received from the Posture (HostScan) module. An attacker could exploit this vulnerability by sending crafted HostScan data to an affected device, allowing them to cause the device to reload, resulting in a denial of service (DoS) condition.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software, update to a version that includes the fix for this issue. For Cisco Firepower Threat Defense (FTD) Software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Posture (HostScan) module to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2023-00025

CVE-2022-20947

Affected Products

Cisco Asa

Cisco Ftd

References · 10

• https://safe-surf.ru/specialists/bulletins-nkcki/686246 · Security Note
• https://bdu.fstec.ru/vul/2023-00025 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20947 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-dap-dos-GhYZBxDU · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20947 · Vendor Advisory
• https://t.me/cvenotify/37809 · Telegram Post
• https://t.me/cvenotify/56624 · Telegram Post
• https://vuldb.com/ru/?id.213293 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-dap-dos-GhYZBxDU · Note
• https://t.me/cvenotify/37808 · Telegram Post