CVE-2022-20757— Cisco Firepower Threat Defense Software Denial of Service Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-20757
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Threat Defense Software Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traffic handling when platform limits are reached. An attacker could exploit this vulnerability by sending a high rate of UDP traffic through an affected device. A successful exploit could allow the attacker to cause all new, incoming connections to be dropped, resulting in a DoS condition.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不加限制或调节的资源分配
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Firepower Threat Defense 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。 Cisco Firepower Threat Defense (FTD)存在安全漏洞，该漏洞源于达到平台限制时不正确的流量处理。攻击者可以通过向受影响的设备发送高速率的 UDP 流量来造成拒绝服务 (DoS) 状况。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Threat Defense Software | n/a | - |
II. Public POCs for CVE-2022-20757
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-20757
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-JnnJm4wBvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2022-20757
Same Patch Batch · Cisco · 2022-05-03 · 19 CVEs total
| CVE-2022-20759 | 8.8 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2022-20746 | 8.6 HIGH | Cisco Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability |
| CVE-2022-20715 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Ac |
| CVE-2022-20751 | 8.6 HIGH | Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerabilit |
| CVE-2022-20760 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspe |
| CVE-2022-20767 | 8.6 HIGH | Cisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability |
| CVE-2022-20745 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2022-20737 | 8.5 HIGH | Cisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability |
| CVE-2022-20742 | 7.4 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKE |
| CVE-2022-20743 | 6.5 MEDIUM | Cisco Firepower Management Center File Upload Security Bypass Vulnerability |
| CVE-2022-20740 | 6.1 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability |
| CVE-2022-20629 | 5.4 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2022-20628 | 5.4 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2022-20627 | 5.4 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2022-20748 | 5.3 MEDIUM | Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerabi |
| CVE-2022-20729 | 4.4 MEDIUM | Cisco Firepower Threat Defense Software XML Injection Vulnerability |
| CVE-2022-20730 | 4.0 MEDIUM | Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerabilit |
| CVE-2022-20744 | Cisco Firepower Management Center Software Information Disclosure Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Firepower Threat Defense Software
- CVE-2025-20268
Cisco Secure Firewall Threat Defense Software Geolocation Re - CVE-2025-20222
Cisco Adaptive Security Appliance Software and Firepower Thr - CVE-2025-20217
Cisco Firepower Threat Defense Intrusion Detection Denial of - CVE-2021-1494
Snort 安全漏洞 - CVE-2021-34753
Cisco Firepower Threat Defense Ethernet Industrial Protocol
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-770
- CVE-2026-42294
Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in W - CVE-2026-42189
Russh: Pre-auth DoS via unbounded allocation in keyboard-int - CVE-2026-42793
Atom table exhaustion via attacker-controlled GraphQL SDL na - CVE-2026-44499
ZEBRA: Permanent Block Discovery Halt via Gossip Queue Satur - CVE-2026-44500
ZEBRA: Allocation Amplification in Inbound Network Deseriali
V. Comments for CVE-2022-20757
No comments yet