cisco-sa-ftd-inline-dos-nXqUyEqM: Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability
First published: Wed Oct 21 2020(Updated: )
A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense (FTD) Software for interfaces that are configured either as Inline Pair or in Passive mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation when Ethernet frames are processed. An attacker could exploit this vulnerability by sending malicious Ethernet frames through an affected device. A successful exploit could allow the attacker do either of the following: Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-inline-dos-nXqUyEqM This advisory is part of the October 2020 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication, which includes 17 Cisco Security Advisories that describe 17 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: October 2020 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FTD Software | >=Earlier than 6.2.2=6.2.2=6.2.3=6.3.0<=6.4.0<6.4.0.10 | 6.4.0.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Firepower Threat Defense Software vulnerability?
The vulnerability ID for this Cisco Firepower Threat Defense Software vulnerability is cisco-sa-ftd-inline-dos-nXqUyEqM.
What is the severity rating for this vulnerability?
The severity rating for this vulnerability is 7.4 (high).
What software versions are affected by this vulnerability?
The affected software versions are earlier than 6.2.2, 6.2.2, 6.2.3, 6.3.0, up to and including 6.4.0, and up to but excluding 6.4.0.10.
How can an attacker exploit this vulnerability?
An unauthenticated, adjacent attacker could exploit this vulnerability to cause a denial of service (DoS) condition.
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at the Cisco Security Advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-inline-dos-nXqUyEqM
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/title
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/tags
- agent/event
- agent/description
- vendor/cisco
- canonical/cisco ftd software
- version/cisco ftd software/earlier than 6.2.2
- version/cisco ftd software/6.2.2
- version/cisco ftd software/6.2.3
- version/cisco ftd software/6.3.0
- version/cisco ftd software/6.4.0