Cisco Firepower Threat Defense Software SSL/TLS DoS (cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx)

high Nessus Plugin ID 168873

Synopsis

The remote device is missing a vendor-supplied security patch

Description

A vulnerability in the SSL VPN negotiation process for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient direct memory access (DMA) memory management during the negotiation phase of an SSL VPN connection. An attacker could exploit this vulnerability by sending a steady stream of crafted Datagram TLS (DTLS) traffic to an affected device. A successful exploit could allow the attacker to exhaust DMA memory on the device and cause a DoS condition.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to the relevant fixed version referenced in Cisco bug ID CSCvu59817

See Also

http://www.nessus.org/u?24a25658

https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-74302

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu59817

Plugin Details

Severity: High

ID: 168873

File Name: cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx-ftd.nasl

Version: 1.3

Type: local

Family: CISCO

Published: 12/16/2022

Updated: 3/31/2023

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2020-3529

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:cisco:firepower_threat_defense

Required KB Items: installed_sw/Cisco Firepower Threat Defense

Exploit Ease: No known exploits are available

Patch Publication Date: 10/21/2020

Vulnerability Publication Date: 10/21/2020

Reference Information

CVE: CVE-2020-3529

CWE: 400

CISCO-SA: cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx

IAVA: 2020-A-0488-S

CISCO-BUG-ID: CSCvu59817