A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit this vulnerability by sending a crafted stream of TCP traffic through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:43
Type | Values Removed | Values Added |
---|---|---|
References | () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-kM9SHhOu - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 7.1
v3 : 8.6 |
Information
Published : 2022-05-03 04:15
Updated : 2024-11-21 06:43
NVD link : CVE-2022-20746
Mitre link : CVE-2022-20746
CVE.ORG link : CVE-2022-20746
JSON object : View
Products Affected
cisco
- firepower_threat_defense
CWE
CWE-476
NULL Pointer Dereference