Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-20742

A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerability is due to an improper implementation of Galois/Counter Mode (GCM) ciphers. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting a sufficient number of encrypted messages across an affected IPsec IKEv2 VPN tunnel and then using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to decrypt, read, modify, and re-encrypt data that is transmitted across an affected IPsec IKEv2 VPN tunnel.

Published

2022-05-03T04:15:09.317

Last Modified

2024-11-21T06:43:27.517

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.4 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-325
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco firepower_threat_defense < 6.4.0.15 Yes
Application cisco firepower_threat_defense < 6.6.5.2 Yes
Application cisco firepower_threat_defense < 7.0.2 Yes
Application cisco firepower_threat_defense 7.1.0 Yes
Operating System cisco adaptive_security_appliance_software < 9.12.4.38 Yes
Operating System cisco adaptive_security_appliance_software < 9.14.4 Yes
Operating System cisco adaptive_security_appliance_software < 9.15.1.21 Yes
Operating System cisco adaptive_security_appliance_software < 9.16.2.14 Yes
Operating System cisco adaptive_security_appliance_software < 9.17.1.7 Yes
References