CVE-2022-20854

{"id": "CVE-2022-20854", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-11-15T21:15:27.867", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-dos-OwEunWJN", "source": "ykramarz@cisco.com"}, {"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-dos-OwEunWJN", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-400"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-755"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to improper error handling when an SSH session fails to be established. An attacker could exploit this vulnerability by sending a high rate of crafted SSH connections to the instance. A successful exploit could allow the attacker to cause resource exhaustion, resulting in a reboot on the affected device."}, {"lang": "es", "value": "Una vulnerabilidad en el procesamiento de conexiones SSH de Cisco Firepower Management Center (FMC) y el software Cisco Firepower Threat Defense (FTD) podr\u00eda permitir que un atacante remoto no autenticado cause una condici\u00f3n de Denegaci\u00f3n de Servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a un manejo inadecuado de errores cuando no se puede establecer una sesi\u00f3n SSH. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una alta tasa de conexiones SSH manipuladas a la instancia. Un exploit exitoso podr\u00eda permitir que el atacante provoque el agotamiento de los recursos, lo que provocar\u00eda un reinicio en el dispositivo afectado."}], "lastModified": "2024-11-26T16:09:02.407", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2763D059-E717-43B8-8108-8025CDDF73EB", "versionEndIncluding": "6.1.0.7", "versionStartIncluding": "6.1.0"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A2861D3-2CAE-448E-8A0B-822F4E730971", "versionEndIncluding": "6.2.0.6", "versionStartIncluding": "6.2.0"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDB7B36E-7DA5-4690-9D21-6BFD8025766C", "versionEndIncluding": "6.2.2.5", "versionStartIncluding": "6.2.2"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B2802CF-8A7F-4FC6-A406-F1F26C932F3C", "versionEndIncluding": "6.2.3.18", "versionStartIncluding": "6.2.3"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "129717CC-A91F-4F05-8096-E9CABDFE6F6F", "versionEndIncluding": "6.3.0.5", "versionStartIncluding": "6.3.0"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25585CDD-8917-43DD-8FE4-01CF9C7AADCA", "versionEndIncluding": "6.4.0.15", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2586C31E-6CAC-433C-90B0-6233CA28D041", "versionEndIncluding": "6.5.0.5", "versionStartIncluding": "6.5.0"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C8ECB61-27AB-49B9-8201-AD36C3E924B0", "versionEndIncluding": "6.7.0.3", "versionStartIncluding": "6.7.0"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A4A52EA-D464-4855-ABEC-FD98E0F3BD97"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81F9AF68-70BD-46DE-B7F2-97C9BD5182A9"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1D808CD-B030-4334-A286-9B3A1D35C61D"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DFE9115-3E32-4A55-AB5A-83513322FE97"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09BD6616-B2B9-49B1-AD20-9B13D93C8F2C"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35A9634E-FCF4-4C67-A463-6BA5F63DD2A5"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D8CF5AA-7B41-4E98-8E7E-A399AAA510B9"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8452BA9A-F56C-48E0-BDBA-9095AF78F521"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.6.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2CE3B06-353C-4623-9EF4-78814DCB0D7D"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFA94312-376E-4785-888F-3C07612E1DF7"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29E73FBF-2579-4660-AFFA-7F9607004226"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87FAAFFB-0589-441B-8289-8B8A6E18F705"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73B92119-793D-4A43-A056-24DB6826E759"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "093A0BC2-037C-463F-AFC5-EF11C2954EAD"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4F434FC-CAA4-4DBB-8094-C4ECC28B31E7"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68C70BB3-33B3-4E7E-99D5-FF76D4ED96AE"}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B881B8DF-A96D-4B64-B98A-71F0D3388641"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64116F5B-671C-46DB-A78D-AB14AAF946FD", "versionEndIncluding": "6.1.0.7", "versionStartIncluding": "6.1.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD237542-FED6-4013-AD9F-18891954FE05", "versionEndIncluding": "6.2.0.6", "versionStartIncluding": "6.2.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F74A25A-601D-470D-BA43-EA68ADD266C6", "versionEndIncluding": "6.2.2.5", "versionStartIncluding": "6.2.2"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D58D7217-F6F5-4B58-B59C-E5C8781C87A9", "versionEndIncluding": "6.2.3.18", "versionStartIncluding": "6.2.3"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDE0C110-518D-4E51-BCEB-F4E9FC448278", "versionEndIncluding": "6.3.0.5", "versionStartIncluding": "6.3.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "874E0E13-4A9E-4296-BEE6-F5B1077411A0", "versionEndIncluding": "6.4.0.15", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "171E1C5D-68C5-4BBC-AE18-D1518A1B7277", "versionEndIncluding": "6.5.0.5", "versionStartIncluding": "6.5.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1110632C-526F-4025-A7BE-0CF9F37E5F9E", "versionEndIncluding": "6.7.0.3", "versionStartIncluding": "6.7.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD48BE40-C647-429A-81B6-59E125BBE415"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCD69468-8067-4A5D-B2B0-EC510D889AA0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20AE4051-FA3B-4F0B-BD3D-083A14269FF6"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46A42D07-FF3E-41B4-BA39-3A5BDA4E0E61"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3985EA37-2B77-45F2-ABA5-5CCC7B35CA2E"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67FB5ABE-3C40-4C58-B91F-0621C2180FAC"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53909FD6-EC74-4D2F-99DA-26E70400B53F"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55FE024D-0D43-40AD-9645-8C54ECF17824"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.6.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC411A8D-CD39-46F5-B8FC-6753E618FAEC"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBCA75A6-0A3E-4393-8884-9F3CE190641E"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F3C12D3-7662-46C5-9E88-D1BE6CF605E0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "046B53A0-6BC1-461A-9C28-C534CE12C4BD"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CA889E1-4E8F-4ECE-88AC-7A240D5CBF0A"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D1C767F-3E06-43B7-A0CC-D51D97A053EB"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43A950B0-A7CA-4CE7-A393-A18C8C41B08E"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7E221CB-BD0F-4AEE-8646-998B75647714"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:7.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "225382DE-2919-48F4-9CC0-DE685EAAFDF4"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}