Observable discrepancy in Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2022-20866 |
| CWE-ID | CWE-203 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #1 is available. |
| Vulnerable software |
Cisco Adaptive Security Appliance (ASA) Hardware solutions / Security hardware applicances Cisco Firepower Threat Defense (FTD) Hardware solutions / Security hardware applicances Firepower 9300 Series Security Appliances Hardware solutions / Security hardware applicances ASA 5506-X with FirePOWER Services Hardware solutions / Routers & switches, VoIP, GSM, etc ASA 5506H-X with FirePOWER Services Hardware solutions / Routers & switches, VoIP, GSM, etc ASA 5506W-X with FirePOWER Services Hardware solutions / Routers & switches, VoIP, GSM, etc ASA 5508-X with FirePOWER Services Hardware solutions / Routers & switches, VoIP, GSM, etc ASA 5516-X with FirePOWER Services Hardware solutions / Routers & switches, VoIP, GSM, etc Firepower 1000 Series Next-Generation Firewall Hardware solutions / Routers & switches, VoIP, GSM, etc Firepower 2100 Series Security Appliances Hardware solutions / Routers & switches, VoIP, GSM, etc Firepower 4100 Series Security Appliances Hardware solutions / Routers & switches, VoIP, GSM, etc Secure Firewall 3100 Server applications / Server solutions for antivurus protection |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Observable discrepancy
EUVDB-ID: #VU66391
Risk: Medium
CVSSv4.0: 6.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Green]
CVE-ID: CVE-2022-20866
CWE-ID:
CWE-203 - Observable discrepancy
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a logic error when the RSA key is stored in memory on a hardware platform that performs hardware-based cryptography. A remote attacker can perform a Lenstra side-channel attack and retrieve the RSA private key.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco Adaptive Security Appliance (ASA): 9.16 - 9.18
Cisco Firepower Threat Defense (FTD): 7.0.0 - 7.2.0
ASA 5506-X with FirePOWER Services: All versions
ASA 5506H-X with FirePOWER Services: All versions
ASA 5506W-X with FirePOWER Services: All versions
ASA 5508-X with FirePOWER Services: All versions
ASA 5516-X with FirePOWER Services: All versions
Firepower 1000 Series Next-Generation Firewall: All versions
Firepower 2100 Series Security Appliances: All versions
Firepower 4100 Series Security Appliances: All versions
Firepower 9300 Series Security Appliances: All versions
Secure Firewall 3100: All versions
CPE2.3- cpe:2.3:h:cisco_systems:asa:9.16:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:asa:9.17:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:asa:9.18:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:cisco_ftd:7.0.0:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:cisco_ftd:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:cisco_ftd:7.2.0:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:asa_5506-x_with_firepower_services:*:*:*:*:*:asa_5500-x_with_firepower_services:*:*
- cpe:2.3:h:cisco_systems:asa_5506h-x_with_firepower_services:*:*:*:*:*:asa_5500-x_with_firepower_services:*:*
- cpe:2.3:h:cisco_systems:asa_5506w-x_with_firepower_services:*:*:*:*:*:asa_5500-x_with_firepower_services:*:*
- cpe:2.3:h:cisco_systems:asa_5508-x_with_firepower_services:*:*:*:*:*:asa_5500-x_with_firepower_services:*:*
- cpe:2.3:h:cisco_systems:asa_5516-x_with_firepower_services:*:*:*:*:*:asa_5500-x_with_firepower_services:*:*
- cpe:2.3:h:cisco_systems:firepower_1000_series_next-generation_firewall:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:firepower_2100_series_security_appliances:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:firepower_4100_series_security_appliances:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:firepower_9300_series_security_appliances:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:secure_firewall_3100:*:*:*:*:*:*:*:*
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
