Lucene search

[email protected]CVE-2022-20742

HistoryMay 03, 2022 - 4:15 a.m.

CVE-2022-20742

2022-05-0304:15:09

CWE-325

[email protected]

web.nvd.nist.gov

cisco

asa

firepower

vpn

library

vulnerability

cve-2022-20742

ipsec

ikev2

gcm

cipher

remote attack

data modification

cryptanalysis

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

JSON

A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerability is due to an improper implementation of Galois/Counter Mode (GCM) ciphers. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting a sufficient number of encrypted messages across an affected IPsec IKEv2 VPN tunnel and then using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to decrypt, read, modify, and re-encrypt data that is transmitted across an affected IPsec IKEv2 VPN tunnel.

Affected configurations

NVD

Node

ciscofirepower_threat_defenseRange<6.4.0.15

ciscofirepower_threat_defenseRange6.5.0–6.6.5.2

ciscofirepower_threat_defenseRange7.0.0–7.0.2

ciscofirepower_threat_defenseMatch7.1.0

ciscoadaptive_security_appliance_softwareRange<9.12.4.38

ciscoadaptive_security_appliance_softwareRange9.13.0–9.14.4

ciscoadaptive_security_appliance_softwareRange9.15.0–9.15.1.21

ciscoadaptive_security_appliance_softwareRange9.16.0–9.16.2.14

ciscoadaptive_security_appliance_softwareRange9.17.0–9.17.1.7

CPENameOperatorVersion
cisco:firepower_threat_defensecisco firepower threat defenselt6.4.0.15
cisco:firepower_threat_defensecisco firepower threat defenselt6.6.5.2
cisco:firepower_threat_defensecisco firepower threat defenselt7.0.2
cisco:firepower_threat_defensecisco firepower threat defenseeq7.1.0
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwarelt9.12.4.38
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwarelt9.14.4
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwarelt9.15.1.21
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwarelt9.16.2.14
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwarelt9.17.1.7

CPE	Name	Operator	Version
cisco:firepower_threat_defense	cisco firepower threat defense	lt	6.4.0.15
cisco:firepower_threat_defense	cisco firepower threat defense	lt	6.6.5.2
cisco:firepower_threat_defense	cisco firepower threat defense	lt	7.0.2
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.1.0
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	lt	9.12.4.38
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	lt	9.14.4
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	lt	9.15.1.21
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	lt	9.16.2.14
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	lt	9.17.1.7

CNA Affected

[
  {
    "product": "Cisco Adaptive Security Appliance (ASA) Software ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ipsec-mitm-CKnLr4

Social References

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

JSON

Related for CVE-2022-20742

cisco1 prion1 cvelist1 nessus2 nvd1