CVE-2023-20070 A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote at
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2023-20070?
CVE-2023-20070 is a medium-severity vulnerability in Cisco Secure Firewall Threat Defense, published on 1 Nov 2023.
Official description
A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability is due to a logic error in how memory allocations are handled during a TLS 1.3 session. Under specific, time-based constraints, an attacker could exploit this vulnerability by sending a crafted TLS 1.3 message sequence through an affected device. A successful exploit could allow the attacker to cause the Snort 3 detection engine to reload, resulting in a denial of service (DoS) condition. While the Snort detection engine reloads, packets going through the FTD device that are sent to the Snort detection engine will be dropped. The Snort detection engine will restart automatically. No manual intervention is required.
Weakness: CWE-244
Which versions are affected by CVE-2023-20070?
It affects 1 product.
Products include Cisco Secure Firewall Threat Defense.
How do I fix CVE-2023-20070?
No fix has been published for CVE-2023-20070 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-20070 being exploited?
There is no known exploitation of CVE-2023-20070 in the wild and no public exploit code.
Other vulnerabilities in Cisco Secure Firewall Threat Defense
- CVE-2024-20412 Hardcoded credentials in Cisco Firepower Threat Defense Software
- CVE-2024-20330 Memory corruption in Cisco Firepower Threat Defense Software
- CVE-2024-20339 Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability
- CVE-2024-20351 Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability
- CVE-2023-20083 Denial of service in Cisco Firepower Threat Defense Software
Sources
Also known as GHSA-9929-5h8g-7gv5.