CVE-2022-20940
First published: Thu Nov 10 2022(Updated: )
A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses SSL decryption policies. An attacker could exploit this vulnerability by sending crafted TLS messages to an affected device, which would act as an oracle and allow the attacker to carry out a chosen-ciphertext attack. A successful exploit could allow the attacker to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions to the affected device.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Threat Defense | >=6.2.3<=6.2.3.18 | |
| Cisco Firepower Threat Defense | >=6.3.0<=6.3.0.5 | |
| Cisco Firepower Threat Defense | >=6.4.0<=6.4.0.14 | |
| Cisco Firepower Threat Defense | >=6.5.0<=6.5.0.5 | |
| Cisco Firepower Threat Defense | >=6.7.0<=6.7.0.3 | |
| Cisco Firepower Threat Defense | >=7.0.0<=7.0.3 | |
| Cisco Firepower Threat Defense | =6.6.0 | |
| Cisco Firepower Threat Defense | =6.6.0.1 | |
| Cisco Firepower Threat Defense | =6.6.1 | |
| Cisco Firepower Threat Defense | =6.6.3 | |
| Cisco Firepower Threat Defense | =6.6.4 | |
| Cisco Firepower Threat Defense | =6.6.5 | |
| Cisco Firepower Threat Defense | =6.6.5.1 | |
| Cisco Firepower Threat Defense | =6.6.5.2 | |
| Cisco Firepower Threat Defense | =7.1.0.0 | |
| Cisco Firepower Threat Defense | =7.1.0.1 | |
| Cisco Firepower Threat Defense | =7.1.0.2 |
Remedy
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-bb-rCgtmY2
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20940?
CVE-2022-20940 is a vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software that allows an unauthenticated, remote attacker to gain access to sensitive information.
Which software is affected by CVE-2022-20940?
Cisco Firepower Threat Defense Software versions 6.2.3 through 6.2.3.18, 6.3.0 through 6.3.0.5, 6.4.0 through 6.4.0.14, 6.5.0 through 6.5.0.5, 6.7.0 through 6.7.0.3, 7.0.0 through 7.0.3, 6.6.0, 6.6.0.1, 6.6.1, 6.6.3, 6.6.4, 6.6.5, 6.6.5.1, 6.6.5.2, 7.1.0.0, 7.1.0.1, and 7.1.0.2 are affected by CVE-2022-20940.
How severe is CVE-2022-20940?
CVE-2022-20940 has a severity rating of 5.3, which is considered medium.
What is the CWE ID for CVE-2022-20940?
CVE-2022-20940 has a CWE ID of 203.
How can I fix CVE-2022-20940?
To fix CVE-2022-20940, it is recommended to upgrade to a fixed version of Cisco Firepower Threat Defense (FTD) Software as mentioned in the Cisco Security Advisory.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/remedy
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco firepower threat defense
- version/cisco firepower threat defense/6.2.3
- version/cisco firepower threat defense/6.2.3.18
- version/cisco firepower threat defense/6.3.0
- version/cisco firepower threat defense/6.3.0.5
- version/cisco firepower threat defense/6.4.0
- version/cisco firepower threat defense/6.4.0.14
- version/cisco firepower threat defense/6.5.0
- version/cisco firepower threat defense/6.5.0.5
- version/cisco firepower threat defense/6.7.0
- version/cisco firepower threat defense/6.7.0.3
- version/cisco firepower threat defense/7.0.0
- version/cisco firepower threat defense/7.0.3
- version/cisco firepower threat defense/6.6.0
- version/cisco firepower threat defense/6.6.0.1
- version/cisco firepower threat defense/6.6.1
- version/cisco firepower threat defense/6.6.3
- version/cisco firepower threat defense/6.6.4
- version/cisco firepower threat defense/6.6.5
- version/cisco firepower threat defense/6.6.5.1
- version/cisco firepower threat defense/6.6.5.2
- version/cisco firepower threat defense/7.1.0.0
- version/cisco firepower threat defense/7.1.0.1
- version/cisco firepower threat defense/7.1.0.2