ID
VAR-202204-2008
CVE
CVE-2022-20730
TITLE
Cisco Firepower Threat Defense Software vulnerabilities
Trust: 0.8
DESCRIPTION
A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this vulnerability by sending traffic through an affected device that should be blocked by the affected device. A successful exploit could allow the attacker to bypass device controls and successfully send traffic to devices that are expected to be protected by the affected device. Cisco Firepower Threat Defense (FTD) There are unspecified vulnerabilities in the software.Information may be tampered with. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-sidns-bypass-3PzA5pO This advisory is part of the April 2022 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication. For a complete list of the advisories and links to them, see Cisco Event Response: April 2022 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 6.4.0.15 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 6.7.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 6.5.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 7.0.2 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 6.6.5.2 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco firepower threat defense ソフトウェア | scope: | eq | version: | cisco firepower threat defense software | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco firepower threat defense ソフトウェア | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco firepower threat defense ソフトウェア | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-241 | Trust: 1.0 |
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
| problemtype: | others (CWE-Other) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | cisco-sa-ftd-sidns-bypass-3PzA5pO | url: | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-sidns-bypass-3PzA5pO | Trust: 0.8 |
| title: | Cisco Firepower Threat Defense Security vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=192606 | Trust: 0.6 |
| title: | Cisco: Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability | url: | https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-ftd-sidns-bypass-3PzA5pO | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-20730 | Trust: 3.4 |
| db: | JVNDB | id: | JVNDB-2022-010593 | Trust: 0.8 |
| db: | CS-HELP | id: | SB2022042815 | Trust: 0.6 |
| db: | AUSCERT | id: | ESB-2022.1919 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202204-4494 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2022-43398 | Trust: 0.1 |
| db: | VULHUB | id: | VHN-405283 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2022-20730 | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-ftd-sidns-bypass-3pza5po | Trust: 2.4 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-20730 | Trust: 0.8 |
| url: | https://www.cybersecurity-help.cz/vdb/sb2022042815 | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2022.1919 | Trust: 0.6 |
| url: | https://cxsecurity.com/cveshow/cve-2022-20730/ | Trust: 0.6 |
SOURCES
| db: | VULHUB | id: | VHN-405283 |
| db: | VULMON | id: | CVE-2022-20730 |
| db: | JVNDB | id: | JVNDB-2022-010593 |
| db: | CNNVD | id: | CNNVD-202204-4494 |
| db: | NVD | id: | CVE-2022-20730 |
LAST UPDATE DATE
2024-11-23T22:10:47.138000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-405283 | date: | 2022-05-12T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-010593 | date: | 2023-08-16T05:27:00 |
| db: | CNNVD | id: | CNNVD-202204-4494 | date: | 2022-05-13T00:00:00 |
| db: | NVD | id: | CVE-2022-20730 | date: | 2024-11-21T06:43:26.033 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-405283 | date: | 2022-05-03T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-010593 | date: | 2023-08-16T00:00:00 |
| db: | CNNVD | id: | CNNVD-202204-4494 | date: | 2022-04-27T00:00:00 |
| db: | NVD | id: | CVE-2022-20730 | date: | 2022-05-03T04:15:09.120 |