CVE-2022-20767

CVE-2022-20767 describes a DoS vulnerability in Cisco Firepower Threat Defense (FTD) software due to improper handling of the DNS reputation enforcement rule in the Snort 3 evaluation. An unauthenticated, remote attacker could send crafted UDP packets through an affected device to cause a buildup...

CVE-2022-20759

Cisco ASA and Firepower Threat Defense (FTD) web services interface for remote access VPN features contains a privilege-escalation flaw due to improper separation of authentication and authorization scopes. An authenticated but unprivileged remote attacker can send crafted HTTPS requests to the w...

CVE-2022-20759 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, but unprivileged, remote attacker to elevate privileges to level 15. This vulnerability is d...

CVE-2022-20760 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability

A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service condition DoS on an affected device. This vulnerability is due to a lack of proper...

CVE-2022-20760 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability

A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service condition DoS on an affected device. This vulnerability is due to a lack of proper...

CVE-2022-20760

The CVE-2022-20760 entry concerns Cisco ASA Software and Firepower Threat Defense (FTD) DNS inspection handler. The vulnerability arises from improper processing of incoming DNS requests, enabling an unauthenticated, remote attacker to trigger a denial-of-service condition by sending crafted DNS ...

CVE-2022-20757

Cisco Firepower Threat Defense (FTD) Software contains a DoS vulnerability where a high-rate UDP flood exploits improper traffic handling once platform limits are reached, causing all new connections to be dropped. This is an unauthenticated, remote attack described in multiple sources (Cisco adv...

CVE-2022-20751

Cisco Firepower Threat Defense (FTD) Software uses Snort integration that is vulnerable to unlimited memory consumption via crafted IP packets, leading to DoS. Affected component: Snort detection engine integration in FTD; root cause: insufficient memory management for certain Snort events, enabl...

CVE-2022-20748

Cisco Firepower Threat Defense (FTD) Software contains a vulnerability in the local malware analysis process caused by insufficient error handling. An unauthenticated, remote attacker can trigger a DoS by sending a crafted file, crashing the local malware analysis process. Cisco’s advisory notes ...

CVE-2022-20746

Cisco Firepower Threat Defense (FTD) Software TCP proxy can be DoSed by an unauthenticated, remote attacker via a crafted TCP stream due to improper handling of TCP flows. Impact is device reload leading to availability loss. Cisco and third-party advisories (Cisco Security Advisory, Nessus plugi...

CVE-2022-20745 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to...

CVE-2022-20745

CVE-2022-20745 affects Cisco ASA (ASAs) and Cisco Firepower Threat Defense (FTD) web services interface for remote access VPN. Root cause: improper input validation when parsing HTTPS requests, allowing unauthenticated remote attackers to trigger a reload and DoS. Affected products include ASA/FT...

CVE-2022-20745 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to...

CVE-2022-20751: Allocation of Resources Without Limits or Throttling

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service DoS condition on an affected device. This vulnerability is due t...

CVE-2022-20748: Improper Control of a Resource Through its Lifetime

A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. This vulnerability is due to insufficient error handling in the local malware...

CVE-2022-20745: Improper Input Validation

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to...

CVE-2022-20729: XML Injection (aka Blind XPath Injection)

A vulnerability in CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted input in commands...

CVE-2022-20715: Improper Input Validation

A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to...

CVE-2022-20746: NULL Pointer Dereference

A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit this vulnerability by...

CVE-2022-20757: Allocation of Resources Without Limits or Throttling

A vulnerability in the connection handling function in Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper traffic handling when platform limits are...