CVE-2022-20748: Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability
First published: Tue May 03 2022(Updated: )
A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to insufficient error handling in the local malware analysis process of an affected device. An attacker could exploit this vulnerability by sending a crafted file through the device. A successful exploit could allow the attacker to cause the local malware analysis process to crash, which could result in a DoS condition. Notes: Manual intervention may be required to recover from this situation. Malware cloud lookup and dynamic analysis will not be impacted.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Threat Defense | =7.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Firepower Threat Defense (FTD) Software vulnerability?
The vulnerability ID for this Cisco Firepower Threat Defense (FTD) Software vulnerability is CVE-2022-20748.
What does this vulnerability allow an attacker to do?
This vulnerability allows an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device.
What is the severity of CVE-2022-20748?
The severity of CVE-2022-20748 is medium with a CVSS score of 5.3.
Which version of Cisco Firepower Threat Defense (FTD) Software is affected by this vulnerability?
Version 7.0.0 of Cisco Firepower Threat Defense (FTD) Software is affected by this vulnerability.
How can I fix CVE-2022-20748?
Cisco has released a security advisory with mitigation measures and software updates to address this vulnerability. Please refer to the Cisco Security Advisory for more information.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/title
- agent/last-modified-date
- agent/references
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco firepower threat defense
- version/cisco firepower threat defense/7.0.0