4.0mediumMedium

CVE-2022-20730

Cisco Secure Firewall Threat Defense

A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this vulnerability by sending traffic through an affected device that should be blocked by the affected device. A successful exploit could allow the attacker to bypass device controls and successfully send traffic to devices that are expected to be protected by the affected device.

Exploitation status

  • A vendor advisory or patch reference has been published.

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, exploitation depends on conditions outside the attacker's control.
  • To exploit it, no account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
4.0 (v3.1)
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weakness
CWE-241
Assigned by
psirt@cisco.com

Dates

Published
2022-05-03
Last modified
2026-08-11
Sources
NVD

Affected products

  • Cisco Secure Firewall Threat Defense- 6.4.0.15, 6.5.0 - 6.6.5.2, 6.7.0 - 7.0.2

As listed in the NVD configuration data. Not a statement about your estate.

References