Vulnerability in Cisco Adaptive Security Appliance (Asa) Software
CVE-2022-20742
A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN…
EPSS: 0.001 (32.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Cisco Adaptive Security Appliance (Asa) Software — versions n/a
Weakness classification (CWE)
References
- 20220427 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability (vendor-advisory, x_refsource_CISCO)
Frequently asked questions
- What is CVE-2022-20742?
- CVE-2022-20742 is a high-severity vulnerability in Cisco Adaptive Security Appliance (Asa) Software, classified under Missing Cryptographic Step. CVSS score: 7.4/10. Published 2022-05-03.
- How severe is CVE-2022-20742?
- High severity. CVSS v3 base score is 7.4 out of 10.