Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-20757

Опубликовано: 03 мая 2022
Источник: nvd
CVSS3: 8.6
CVSS3: 7.5
CVSS2: 4.3
EPSS Низкий

Описание

A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traffic handling when platform limits are reached. An attacker could exploit this vulnerability by sending a high rate of UDP traffic through an affected device. A successful exploit could allow the attacker to cause all new, incoming connections to be dropped, resulting in a DoS condition.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Версия до 6.4.0.15 (исключая)
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Версия от 6.5.0 (включая) до 6.6.5.2 (исключая)
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Версия от 6.7.0 (включая) до 7.0.2 (исключая)
cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01227
Низкий

8.6 High

CVSS3

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-770
CWE-770

Связанные уязвимости

CVSS3: 7.5
github
почти 4 года назад

A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traffic handling when platform limits are reached. An attacker could exploit this vulnerability by sending a high rate of UDP traffic through an affected device. A successful exploit could allow the attacker to cause all new, incoming connections to be dropped, resulting in a DoS condition.

CVSS3: 8.6
fstec
больше 4 лет назад

Уязвимость функции обработки соединений микропрограммного обеспечения межсетевых экранов Cisco Firepower Threat Defense (FTD), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 79%
0.01227
Низкий

8.6 High

CVSS3

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-770
CWE-770