CVE-2022-20729 Cisco Firepower Threat Defense Software XML Injection Vulnerability

What is CVE-2022-20729?

CVE-2022-20729 is a medium-severity vulnerability in Cisco Secure Firewall Threat Defense, published on 3 May 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted input in commands. A successful exploit could allow the attacker to inject XML into the command parser, which could result in unexpected processing of the command and unexpected command output.

Weakness: CWE-91

Which versions are affected by CVE-2022-20729?

It affects 1 product.

Products include Cisco Secure Firewall Threat Defense.

How do I fix CVE-2022-20729?

No fix has been published for CVE-2022-20729 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-20729 being exploited?

There is no known exploitation of CVE-2022-20729 in the wild and no public exploit code.

Other vulnerabilities in Cisco Secure Firewall Threat Defense

• CVE-2024-20412 Hardcoded credentials in Cisco Firepower Threat Defense Software Critical 9.3
• CVE-2024-20330 Memory corruption in Cisco Firepower Threat Defense Software High 8.6
• CVE-2024-20339 Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability High 8.6
• CVE-2024-20351 Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability High 8.6
• CVE-2023-20083 Denial of service in Cisco Firepower Threat Defense Software High 8.6

All Cisco Secure Firewall Threat Defense vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9x8p-whr7-xfhg.