CVE-2023-20244: High severity Cisco Secure Firewall Threat Defense vulnerability

Published Nov 1, 2023
·
Updated

A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain packets when they are sent to the inspection engine. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to deplete all 9,472 byte blocks on the device, resulting in traffic loss across the device or an unexpected reload of the device. If the device does not reload on its own, a manual reload of the device would be required to recover from this state.

Affected Software

74 affected components
All of the following
Any of the following
Cisco Secure Firewall Threat Defense=6.2.3
Cisco Secure Firewall Threat Defense=6.2.3.1
Cisco Secure Firewall Threat Defense=6.2.3.2
Cisco Secure Firewall Threat Defense=6.2.3.3
Cisco Secure Firewall Threat Defense=6.2.3.4
Cisco Secure Firewall Threat Defense=6.2.3.5
Cisco Secure Firewall Threat Defense=6.2.3.6
Cisco Secure Firewall Threat Defense=6.2.3.7
Cisco Secure Firewall Threat Defense=6.2.3.8
Cisco Secure Firewall Threat Defense=6.2.3.9
Cisco Secure Firewall Threat Defense=6.2.3.10
Cisco Secure Firewall Threat Defense=6.2.3.11
Cisco Secure Firewall Threat Defense=6.2.3.12
Cisco Secure Firewall Threat Defense=6.2.3.13
Cisco Secure Firewall Threat Defense=6.2.3.14
Cisco Secure Firewall Threat Defense=6.2.3.15
Cisco Secure Firewall Threat Defense=6.2.3.16
Cisco Secure Firewall Threat Defense=6.2.3.17
Cisco Secure Firewall Threat Defense=6.2.3.18
Cisco Secure Firewall Threat Defense=6.4.0
Cisco Secure Firewall Threat Defense=6.4.0.1
Cisco Secure Firewall Threat Defense=6.4.0.2
Cisco Secure Firewall Threat Defense=6.4.0.3
Cisco Secure Firewall Threat Defense=6.4.0.4
Cisco Secure Firewall Threat Defense=6.4.0.5
Cisco Secure Firewall Threat Defense=6.4.0.6
Cisco Secure Firewall Threat Defense=6.4.0.7
Cisco Secure Firewall Threat Defense=6.4.0.8
Cisco Secure Firewall Threat Defense=6.4.0.9
Cisco Secure Firewall Threat Defense=6.4.0.10
Cisco Secure Firewall Threat Defense=6.4.0.11
Cisco Secure Firewall Threat Defense=6.4.0.12
Cisco Secure Firewall Threat Defense=6.4.0.13
Cisco Secure Firewall Threat Defense=6.4.0.14
Cisco Secure Firewall Threat Defense=6.4.0.15
Cisco Secure Firewall Threat Defense=6.4.0.16
Cisco Secure Firewall Threat Defense=6.6.0
Cisco Secure Firewall Threat Defense=6.6.0.1
Cisco Secure Firewall Threat Defense=6.6.1
Cisco Secure Firewall Threat Defense=6.6.3
Cisco Secure Firewall Threat Defense=6.6.4
Cisco Secure Firewall Threat Defense=6.6.5
Cisco Secure Firewall Threat Defense=6.6.5.1
Cisco Secure Firewall Threat Defense=6.6.5.2
Cisco Secure Firewall Threat Defense=6.6.7
Cisco Secure Firewall Threat Defense=6.6.7.1
Cisco Secure Firewall Threat Defense=6.7.0
Cisco Secure Firewall Threat Defense=6.7.0.1
Cisco Secure Firewall Threat Defense=6.7.0.2
Cisco Secure Firewall Threat Defense=6.7.0.3
Cisco Secure Firewall Threat Defense=7.0.0
Cisco Secure Firewall Threat Defense=7.0.0.1
Cisco Secure Firewall Threat Defense=7.0.1
Cisco Secure Firewall Threat Defense=7.0.1.1
Cisco Secure Firewall Threat Defense=7.0.2
Cisco Secure Firewall Threat Defense=7.0.2.1
Cisco Secure Firewall Threat Defense=7.0.3
Cisco Secure Firewall Threat Defense=7.0.4
Cisco Secure Firewall Threat Defense=7.0.5
Cisco Secure Firewall Threat Defense=7.1.0
Cisco Secure Firewall Threat Defense=7.1.0.1
Cisco Secure Firewall Threat Defense=7.1.0.3
Cisco Secure Firewall Threat Defense=7.2.0
Cisco Secure Firewall Threat Defense=7.2.0.1
Cisco Secure Firewall Threat Defense=7.2.1
Cisco Secure Firewall Threat Defense=7.2.2
Cisco Secure Firewall Threat Defense=7.2.3
Cisco Secure Firewall Threat Defense=7.3.0
Cisco Secure Firewall Threat Defense=7.3.1
Cisco Secure Firewall Threat Defense=7.3.1.1
Any of the following
Cisco Firepower 2110
Cisco Firepower 2120
Cisco Firepower 2130
Cisco Firepower 2140

Event History

Nov 1, 2023
CVE Published
via MITRE·04:50 PM
Data Sourced
via MITRE·04:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-20244?

The severity of CVE-2023-20244 is classified as critical due to its potential to allow for denial of service conditions on affected Cisco Firepower devices.

2

How do I fix CVE-2023-20244?

To fix CVE-2023-20244, it is recommended to apply the latest security updates from Cisco for any affected Firepower Threat Defense software versions.

3

What types of devices are affected by CVE-2023-20244?

CVE-2023-20244 affects Cisco Firepower 2100 Series Firewalls running specific versions of Firepower Threat Defense software.

4

Can CVE-2023-20244 be exploited by authenticated users?

No, CVE-2023-20244 can be exploited by unauthenticated remote attackers.

5

What are the affected versions for CVE-2023-20244?

Affected versions for CVE-2023-20244 include Firepower Threat Defense versions 6.2.x, 6.4.x, 6.6.x, 6.7.x, and various versions up to 7.3.1.1.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203