CVE-2022-20730: Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability

Published May 3, 2022
·
Updated

A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this vulnerability by sending traffic through an affected device that should be blocked by the affected device. A successful exploit could allow the attacker to bypass device controls and successfully send traffic to devices that are expected to be protected by the affected device.

Affected Software

6 affected components
Cisco Firepower Threat Defense<6.4.0.15
Cisco Firepower Threat Defense>=6.5.0<6.6.5.2
Cisco Firepower Threat Defense>=6.7.0<7.0.2
Cisco Secure Firewall Threat Defense<6.4.0.15
Cisco Secure Firewall Threat Defense>=6.5.0<6.6.5.2
Cisco Secure Firewall Threat Defense>=6.7.0<7.0.2

Event History

May 3, 2022
CVE Published
via MITRE·03:16 AM
Data Sourced
via MITRE·03:16 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2022-20730?

CVE-2022-20730 is a vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) software.

2

How does CVE-2022-20730 affect Cisco Firepower Threat Defense (FTD) Software?

CVE-2022-20730 allows an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed in Cisco Firepower Threat Defense (FTD) Software.

3

What is the severity of CVE-2022-20730?

CVE-2022-20730 has a severity rating of 7.5 (high).

4

How can an attacker exploit CVE-2022-20730?

An attacker can exploit CVE-2022-20730 through incorrect feed update processing.

5

How can I fix CVE-2022-20730?

To fix CVE-2022-20730, update Cisco Firepower Threat Defense (FTD) Software to version 6.4.0.16, 6.6.5.3, 7.0.3, or later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203