PT-2023-8662 · Cisco · Snort 2 Detection Engine+1

Sanmith Prakash · Published 2023-11-01 · Updated 2024-01-25 · CVE-2023-20083

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description The issue is related to improper error checking when parsing fields within the ICMPv6 header, which could allow an unauthenticated, remote attacker to cause the CPU of an affected device to spike to 100 percent. This could stop all traffic processing and result in a denial of service (DoS) condition. FTD management traffic is not affected by this issue. An attacker could exploit this by sending a crafted ICMPv6 packet through an affected device, causing the device to exhaust CPU resources and stop processing traffic.

Recommendations To resolve the issue, restart the Snort 2 Detection Engine or the Cisco FTD device to recover from the DoS condition. As a temporary workaround, consider restricting access to the ICMPv6 inspection feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2024-01407

CVE-2023-20083

Affected Products

Cisco Ftd

Snort 2 Detection Engine

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-20083 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-icmpv6-dos-4eMkLuN · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20083 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01407 · Security Note
• https://twitter.com/CVEnew/status/1719768412161757448 · Twitter Post