cisco-sa-ftd-sidns-bypass-3PzA5pO: Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability
First published: Wed Apr 27 2022(Updated: )
A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this vulnerability by sending traffic through an affected device that should be blocked by the affected device. A successful exploit could allow the attacker to bypass device controls and successfully send traffic to devices that are expected to be protected by the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-sidns-bypass-3PzA5pO This advisory is part of the April 2022 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication. For a complete list of the advisories and links to them, see Cisco Event Response: April 2022 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FTD Software | >=6.5.0=6.6.0=6.7.0<=7.0.0<7.0.2 (May 2022)>=6.2.2 and earlier=6.3.0<=6.4.0<6.4.0.15 | 7.0.2 (May 2022) 6.4.0.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Firepower Threat Defense software vulnerability?
The vulnerability ID for this Cisco Firepower Threat Defense software vulnerability is cisco-sa-ftd-sidns-bypass-3PzA5pO.
What is the title of this vulnerability?
The title of this vulnerability is Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability.
What is the severity of the vulnerability?
The severity of this vulnerability is medium (4).
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by bypassing the Security Intelligence DNS feed.
Which versions of Cisco Firepower Threat Defense software are affected by this vulnerability?
Versions 6.2.2 and earlier, 6.3.0, 6.4.0, 6.4.0.15, 6.5.0, 6.6.0, 6.7.0, 7.0.0, and 7.0.2 (May 2022) of Cisco Firepower Threat Defense software are affected by this vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, update your Cisco Firepower Threat Defense software to version 7.0.2 (May 2022) or 6.4.0.15, as recommended by Cisco.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the Cisco Security Advisory at the following link: [Cisco Security Advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-sidns-bypass-3PzA5pO).
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/weakness
- agent/references
- agent/title
- agent/author
- agent/severity
- agent/tags
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco ftd software
- version/cisco ftd software/6.5.0
- version/cisco ftd software/6.6.0
- version/cisco ftd software/6.7.0
- version/cisco ftd software/7.0.0
- version/cisco ftd software/6.2.2 and earlier
- version/cisco ftd software/6.3.0
- version/cisco ftd software/6.4.0