CVE-2022-20730: Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability
First published: Tue May 03 2022(Updated: )
A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this vulnerability by sending traffic through an affected device that should be blocked by the affected device. A successful exploit could allow the attacker to bypass device controls and successfully send traffic to devices that are expected to be protected by the affected device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Threat Defense | <6.4.0.15 | |
| Cisco Firepower Threat Defense | >=6.5.0<6.6.5.2 | |
| Cisco Firepower Threat Defense | >=6.7.0<7.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20730?
CVE-2022-20730 is a vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) software.
How does CVE-2022-20730 affect Cisco Firepower Threat Defense (FTD) Software?
CVE-2022-20730 allows an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed in Cisco Firepower Threat Defense (FTD) Software.
What is the severity of CVE-2022-20730?
CVE-2022-20730 has a severity rating of 7.5 (high).
How can an attacker exploit CVE-2022-20730?
An attacker can exploit CVE-2022-20730 through incorrect feed update processing.
How can I fix CVE-2022-20730?
To fix CVE-2022-20730, update Cisco Firepower Threat Defense (FTD) Software to version 6.4.0.16, 6.6.5.3, 7.0.3, or later.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco firepower threat defense
- version/cisco firepower threat defense/6.5.0
- version/cisco firepower threat defense/6.7.0