Lucene search

[email protected]CVE-2023-20177

HistoryNov 01, 2023 - 5:15 p.m.

CVE-2023-20177

2023-11-0117:15:11

CWE-244

[email protected]

web.nvd.nist.gov

cisco

ftd

ssl

vulnerability

remote attacker

restart

snort 3

dos

nvd

4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detection engine could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability exists because a logic error occurs when a Snort 3 detection engine inspects an SSL/TLS connection that has either a URL Category configured on the SSL file policy or a URL Category configured on an access control policy with TLS server identity discovery enabled. Under specific, time-based constraints, an attacker could exploit this vulnerability by sending a crafted SSL/TLS connection through an affected device. A successful exploit could allow the attacker to trigger an unexpected reload of the Snort 3 detection engine, resulting in either a bypass or denial of service (DoS) condition, depending on device configuration. The Snort 3 detection engine will restart automatically. No manual intervention is required.

Affected configurations

NVD

Node

ciscofirepower_threat_defenseMatch7.0.0

ciscofirepower_threat_defenseMatch7.0.0.1

ciscofirepower_threat_defenseMatch7.0.1

ciscofirepower_threat_defenseMatch7.0.1.1

ciscofirepower_threat_defenseMatch7.0.2

ciscofirepower_threat_defenseMatch7.0.2.1

ciscofirepower_threat_defenseMatch7.0.3

ciscofirepower_threat_defenseMatch7.0.4

ciscofirepower_threat_defenseMatch7.0.5

ciscofirepower_threat_defenseMatch7.1.0

ciscofirepower_threat_defenseMatch7.1.0.1

ciscofirepower_threat_defenseMatch7.1.0.2

ciscofirepower_threat_defenseMatch7.1.0.3

ciscofirepower_threat_defenseMatch7.2.0

ciscofirepower_threat_defenseMatch7.2.0.1

ciscofirepower_threat_defenseMatch7.2.1

ciscofirepower_threat_defenseMatch7.2.2

ciscofirepower_threat_defenseMatch7.2.3

ciscofirepower_threat_defenseMatch7.3.0

ciscofirepower_threat_defenseMatch7.3.1

ciscofirepower_threat_defenseMatch7.3.1.1

CPENameOperatorVersion
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.0
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.0.1
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.1
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.1.1
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.2
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.2.1
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.3
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.4
cisco:firepower_threat_defensecisco firepower threat defenseeq7.0.5
cisco:firepower_threat_defensecisco firepower threat defenseeq7.1.0

CPE	Name	Operator	Version
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.0
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.0.1
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.1
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.1.1
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.2
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.2.1
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.3
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.4
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.0.5
cisco:firepower_threat_defense	cisco firepower threat defense	eq	7.1.0

Rows per page:

1-10 of 211

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Firepower Threat Defense Software",
    "versions": [
      {
        "version": "7.0.0",
        "status": "affected"
      },
      {
        "version": "7.0.0.1",
        "status": "affected"
      },
      {
        "version": "7.0.1",
        "status": "affected"
      },
      {
        "version": "7.0.1.1",
        "status": "affected"
      },
      {
        "version": "7.0.2",
        "status": "affected"
      },
      {
        "version": "7.0.2.1",
        "status": "affected"
      },
      {
        "version": "7.0.3",
        "status": "affected"
      },
      {
        "version": "7.0.4",
        "status": "affected"
      },
      {
        "version": "7.0.5",
        "status": "affected"
      },
      {
        "version": "7.1.0",
        "status": "affected"
      },
      {
        "version": "7.1.0.1",
        "status": "affected"
      },
      {
        "version": "7.1.0.2",
        "status": "affected"
      },
      {
        "version": "7.1.0.3",
        "status": "affected"
      },
      {
        "version": "7.2.0",
        "status": "affected"
      },
      {
        "version": "7.2.0.1",
        "status": "affected"
      },
      {
        "version": "7.2.1",
        "status": "affected"
      },
      {
        "version": "7.2.2",
        "status": "affected"
      },
      {
        "version": "7.2.3",
        "status": "affected"
      },
      {
        "version": "7.3.0",
        "status": "affected"
      },
      {
        "version": "7.3.1",
        "status": "affected"
      },
      {
        "version": "7.3.1.1",
        "status": "affected"
      }
    ]
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sa-ftd-snort3-urldos-OccFQTeX

4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

Related for CVE-2023-20177

cvelist1 cisco1 nvd1 prion1