6.5
CVSSv3

CVE-2022-20927

Published: 15/11/2022 Updated: 25/01/2024
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the malicious user to cause the affected device to unexpectedly reload, resulting in a DoS condition.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco adaptive security appliance software 9.13.1.13

cisco adaptive security appliance software 9.14.1.30

cisco adaptive security appliance software 9.13.1.12

cisco adaptive security appliance software 9.14.1.15

cisco adaptive security appliance software 9.13.1

cisco adaptive security appliance software 9.14.2

cisco adaptive security appliance software 9.14.2.4

cisco adaptive security appliance software 9.14.2.8

cisco adaptive security appliance software 9.14.2.13

cisco adaptive security appliance software 9.14.2.15

cisco adaptive security appliance software 9.15.1.15

cisco adaptive security appliance software 9.15.1.16

cisco adaptive security appliance software 9.15.1.17

cisco adaptive security appliance software 9.15.1.1

cisco adaptive security appliance software 9.13.1.7

cisco adaptive security appliance software 9.14.1.10

cisco adaptive security appliance software 9.14.1.19

cisco adaptive security appliance software 9.14.3

cisco adaptive security appliance software 9.14.3.9

cisco adaptive security appliance software 9.15.1

cisco adaptive security appliance software 9.15.1.10

cisco adaptive security appliance software 9.15.1.21

cisco adaptive security appliance software 9.13.1.16

cisco adaptive security appliance software 9.13.1.19

cisco adaptive security appliance software 9.13.1.21

cisco adaptive security appliance software 9.14.1

cisco adaptive security appliance software 9.14.3.13

cisco adaptive security appliance software 9.14.3.18

cisco adaptive security appliance software 9.14.3.15

cisco adaptive security appliance software 9.13.1.2

cisco adaptive security appliance software 9.13.1.10

cisco adaptive security appliance software 9.14.3.1

cisco adaptive security appliance software 9.14.3.11

cisco adaptive security appliance software 9.15.1.7

cisco firepower threat defense 6.6.0.1

cisco firepower threat defense 6.6.0

cisco firepower threat defense

cisco firepower threat defense 6.6.1

cisco firepower threat defense 6.6.3

cisco firepower threat defense 6.6.4

cisco firepower threat defense 6.6.5

cisco firepower threat defense 6.6.5.1

cisco firepower services software for asa -

Vendor Advisories

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device This vulnerability is due to improper memory management when a device initiates SSL/TLS connecti ...