CVE-2022-20751

תיאור (מקור, אנגלית)

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient memory management for certain Snort events. An attacker could exploit this vulnerability by sending a series of crafted IP packets that would generate specific Snort events on an affected device. A sustained attack could cause an out of memory condition on the affected device. A successful exploit could allow the attacker to interrupt all traffic flowing through the affected device. In some circumstances, the attacker may be able to cause the device to reload, resulting in a DoS condition.

מדדים

CVSS 3.1

7.5 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-19/8/2026

CWE

CWE-770

מוצרים מושפעים

cisco: secure firewall threat defense; cisco: firepower 1000; cisco: firepower 1010; cisco: firepower 1020; cisco: firepower 1030; cisco: firepower 1040; cisco: firepower 1120; cisco: firepower 1140; cisco: firepower 1150; cisco: firepower 2100; cisco: firepower 2110; cisco: firepower 2120; cisco: firepower 2130; cisco: firepower 2140; cisco: firepower 4100

קישורים

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa‮… Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa‮… Vendor Advisory