CVE-2022-20795 : A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cis

A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resulting in a denial of service (DoS) condition. This vulnerability is due to suboptimal processing that occurs when establishing a DTLS tunnel as part of an AnyConnect SSL VPN connection. An attacker could exploit this vulnerability by sending a steady stream of crafted DTLS traffic to an affected device. A successful exploit could allow the attacker to exhaust resources on the affected VPN headend device. This could cause existing DTLS tunnels to stop passing traffic and prevent new DTLS tunnels from establishing, resulting in a DoS condition. Note: When the attack traffic stops, the device recovers gracefully.

Published 2022-04-21 19:15:09

Updated 2023-08-16 16:17:08

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2022-20795

Cisco » Adaptive Security Appliance
Versions up to, including, (<=) 9.16.3
cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asa 5505 » Version: N/A
When used together with: Cisco » Asa 5512-x » Version: N/A
When used together with: Cisco » Asa 5515-x » Version: N/A
When used together with: Cisco » Asa 5525-x » Version: N/A
When used together with: Cisco » Asa 5545-x » Version: N/A
When used together with: Cisco » Asa 5555-x » Version: N/A
When used together with: Cisco » Asa 5580 » Version: N/A
When used together with: Cisco » Asa 5585-x » Version: N/A
When used together with: Cisco » Asa For Nexus 1000v » Version: N/A
Cisco » Adaptive Security Appliance Software
Versions from including (>=) 9.17.0 and up to, including, (<=) 9.17.1.9
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asa 5505 » Version: N/A
When used together with: Cisco » Asa 5512-x » Version: N/A
When used together with: Cisco » Asa 5515-x » Version: N/A
When used together with: Cisco » Asa 5525-x » Version: N/A
When used together with: Cisco » Asa 5545-x » Version: N/A
When used together with: Cisco » Asa 5555-x » Version: N/A
When used together with: Cisco » Asa 5580 » Version: N/A
When used together with: Cisco » Asa 5585-x » Version: N/A
When used together with: Cisco » Asa For Nexus 1000v » Version: N/A
Cisco » Firepower Threat Defense
Versions from including (>=) 7.1.0.0 and up to, including, (<=) 7.1.0.1
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 1010 » Version: N/A
When used together with: Cisco » Firepower 1120 » Version: N/A
When used together with: Cisco » Firepower 1140 » Version: N/A
When used together with: Cisco » Firepower 1150 » Version: N/A
When used together with: Cisco » Firepower 2110 » Version: N/A
When used together with: Cisco » Firepower 2120 » Version: N/A
When used together with: Cisco » Firepower 2130 » Version: N/A
When used together with: Cisco » Firepower 2140 » Version: N/A
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A
Cisco » Firepower Threat Defense
Versions up to, including, (<=) 7.0.1
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 1010 » Version: N/A
When used together with: Cisco » Firepower 1120 » Version: N/A
When used together with: Cisco » Firepower 1140 » Version: N/A
When used together with: Cisco » Firepower 1150 » Version: N/A
When used together with: Cisco » Firepower 2110 » Version: N/A
When used together with: Cisco » Firepower 2120 » Version: N/A
When used together with: Cisco » Firepower 2130 » Version: N/A
When used together with: Cisco » Firepower 2140 » Version: N/A
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-20795

EPSS FAQ

0.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 53 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-20795

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.8	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L	3.9	1.4	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: Low
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-20795

CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2022-20795

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vpndtls-dos-TunzLEV

Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2022-20795

Products affected by CVE-2022-20795

Exploit prediction scoring system (EPSS) score for CVE-2022-20795

CVSS scores for CVE-2022-20795

CWE ids for CVE-2022-20795

References for CVE-2022-20795