CVE-2022-20730: Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability
A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this vulnerability by sending traffic through an affected device that should be blocked by the affected device. A successful exploit could allow the attacker to bypass device controls and successfully send traffic to devices that are expected to be protected by the affected device.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20730?
CVE-2022-20730 is a vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) software.
How does CVE-2022-20730 affect Cisco Firepower Threat Defense (FTD) Software?
CVE-2022-20730 allows an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed in Cisco Firepower Threat Defense (FTD) Software.
What is the severity of CVE-2022-20730?
CVE-2022-20730 has a severity rating of 7.5 (high).
How can an attacker exploit CVE-2022-20730?
An attacker can exploit CVE-2022-20730 through incorrect feed update processing.
How can I fix CVE-2022-20730?
To fix CVE-2022-20730, update Cisco Firepower Threat Defense (FTD) Software to version 6.4.0.16, 6.6.5.3, 7.0.3, or later.