CVE-2022-20742: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability
First published: Tue May 03 2022(Updated: )
A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerability is due to an improper implementation of Galois/Counter Mode (GCM) ciphers. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting a sufficient number of encrypted messages across an affected IPsec IKEv2 VPN tunnel and then using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to decrypt, read, modify, and re-encrypt data that is transmitted across an affected IPsec IKEv2 VPN tunnel.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Threat Defense | <6.4.0.15 | |
| Cisco Firepower Threat Defense | >=6.5.0<6.6.5.2 | |
| Cisco Firepower Threat Defense | >=7.0.0<7.0.2 | |
| Cisco Firepower Threat Defense | =7.1.0 | |
| Cisco Adaptive Security Appliance Software | <9.12.4.38 | |
| Cisco Adaptive Security Appliance Software | >=9.13.0<9.14.4 | |
| Cisco Adaptive Security Appliance Software | >=9.15.0<9.15.1.21 | |
| Cisco Adaptive Security Appliance Software | >=9.16.0<9.16.2.14 | |
| Cisco Adaptive Security Appliance Software | >=9.17.0<9.17.1.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20742?
CVE-2022-20742 is a vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software.
How does CVE-2022-20742 affect me?
CVE-2022-20742 allows an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel.
What is the severity of CVE-2022-20742?
The severity of CVE-2022-20742 is high with a CVSS score of 7.4.
Which software versions are affected by CVE-2022-20742?
The affected software versions include Cisco Adaptive Security Appliance (ASA) Software versions up to 9.17.1.7 and Cisco Firepower Threat Defense (FTD) Software versions up to 6.6.5.2.
How do I fix CVE-2022-20742?
To fix CVE-2022-20742, it is recommended to upgrade to a fixed software version provided by Cisco.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/title
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco firepower threat defense
- version/cisco firepower threat defense/6.5.0
- version/cisco firepower threat defense/7.0.0
- version/cisco firepower threat defense/7.1.0
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/9.13.0
- version/cisco adaptive security appliance software/9.15.0
- version/cisco adaptive security appliance software/9.16.0
- version/cisco adaptive security appliance software/9.17.0