VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Nov 15, 2022· Updated Aug 11, 2026

CVE-2022-20940

CVE-2022-20940

Description

A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses SSL decryption policies. An attacker could exploit this vulnerability by sending crafted TLS messages to an affected device, which would act as an oracle and allow the attacker to carry out a chosen-ciphertext attack. A successful exploit could allow the attacker to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions to the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Cisco Systems, Inc./Secure Firewall Threat Defense12 versions
    cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*range: >=6.2.3,<=6.2.3.18
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.2:*:*:*:*:*:*:*
  • Cisco Systems, Inc./FTDllm-fuzzy
  • Cisco Systems, Inc./Firepower Threat Defense Softwarellm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 6.2.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.