Vulnerability in Cisco Firepower Threat Defense Software
CVE-2023-20244
A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain packets when they are sent to the inspection engine. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to deplete all 9,472 byte blocks on the device, resulting in traffic loss across the device or an unexpected reload of the device. If the device does not reload on its own, a manual reload of the device would be required to recover from this state.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.008 (54.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 55th percentile — 54.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- Cisco Firepower Threat Defense Software — versions 6.2.3, 6.2.3.1, 6.2.3.2
- Cisco Firepower 2110
- Cisco Firepower 2120
- Cisco Firepower 2130
- Cisco Firepower 2140
- Cisco Firepower Threat Defense — versions 6.2.3, 6.2.3.1, 6.2.3.2
- Cisco Secure Firewall Threat Defense — versions 6.2.3, 6.2.3.1, 6.2.3.2
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2023-20244?
- CVE-2023-20244 is a high-severity vulnerability in Cisco Firepower Threat Defense Software, classified under CWE-771. CVSS score: 8.6/10. Published 2023-11-01.
- How severe is CVE-2023-20244?
- High severity. CVSS v3 base score is 8.6 out of 10.