PT-2023-7127 · Cisco · Cisco Ftd

Published 2023-10-27 · Updated 2024-01-25 · CVE-2023-20070

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description The issue is related to a logic error in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software, specifically in how memory allocations are handled during a TLS 1.3 session. This could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart by sending a crafted TLS 1.3 message sequence through an affected device. A successful exploit could result in a denial of service (DoS) condition, causing packets to be dropped while the Snort detection engine reloads. The Snort detection engine will restart automatically without requiring manual intervention.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-840

CWE-244

CWE-404

Related Identifiers

BDU:2023-08154

CVE-2023-20070

Affected Products

Cisco Ftd

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-20070 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-uAnUntcV · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08154 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20070 · Vendor Advisory
• https://vuldb.com/ru/?id.244255 · Note
• https://t.me/cibsecurity/73378 · Telegram Post
• https://twitter.com/CVEnew/status/1719768439781200135 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2023110220 · Note