CVE-2022-20949
Last modified
CVE-2022-20949 is a medium-severity vulnerability rated 4.9/10 on the CVSS scale. A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly restricted on an affected device. An attacker could exploit this vulnerability by sending specific messages to the affected HTTPS handler. EPSS estimates a 0.70% chance of exploitation in the next 30 days.
Description
A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly restricted on an affected device. An attacker could exploit this vulnerability by sending specific messages to the affected HTTPS handler. A successful exploit could allow the attacker to perform configuration changes on the affected system, which should be configured and managed only through Cisco Firepower Management Center (FMC) Software.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Firepower Threat Defense | >= 6.1.0, <= 6.1.0.7 |
| Cisco | Firepower Threat Defense | >= 6.2.0, <= 6.2.0.6 |
| Cisco | Firepower Threat Defense | >= 6.2.2, <= 6.2.2.5 |
| Cisco | Firepower Threat Defense | >= 6.2.3, <= 6.2.3.18 |
| Cisco | Firepower Threat Defense | >= 6.3.0, <= 6.3.0.5 |
| Cisco | Firepower Threat Defense | >= 6.4.0, <= 6.4.0.15 |
| Cisco | Firepower Threat Defense | >= 6.5.0, <= 6.5.0.5 |
| Cisco | Firepower Threat Defense | >= 6.6.0, <= 6.6.5.2 |
| Cisco | Firepower Threat Defense | >= 6.7.0, <= 6.7.0.3 |
| Cisco | Firepower Threat Defense | >= 7.0.0, <= 7.0.3 |
| Cisco | Firepower Threat Defense | 6.2.1 |
| Cisco | Firepower Threat Defense | 7.1.0.0 |
| Cisco | Firepower Threat Defense | 7.1.0.1 |
| Cisco | Firepower Threat Defense | 7.1.0.2 |
| Cisco | Firepower Threat Defense | 7.2.0 |
| Cisco | Firepower Threat Defense | 7.2.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-20949?
How severe is CVE-2022-20949?
How do I fix CVE-2022-20949?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-20943Multiple vulnerabilities in the Server Message Block Version…5.8
- CVE-2022-20944A vulnerability in the software image verification functiona…6.8
- CVE-2022-20945A vulnerability in the 802.11 association frame validation o…6.5
- CVE-2022-20946A vulnerability in the generic routing encapsulation (GRE) t…7.5
- CVE-2022-20947A vulnerability in dynamic access policies (DAP) functionali…7.5
- CVE-2022-20948A vulnerability in the web management interface of Cisco&nbs…5.4
- CVE-2022-2095An improper access control check in GitLab CE/EE affecting a…4.3
- CVE-2022-20950A vulnerability in the interaction of SIP and Snort 3 for Ci…5.3
- CVE-2022-20951A vulnerability in the web-based management interface of Cis…6.5
- CVE-2022-20952A vulnerability in the scanning engines of Cisco AsyncOS Sof…5.3
- CVE-2022-20953Multiple vulnerabilities in Cisco TelePresence Collaboration…5.5
- CVE-2022-20954Multiple vulnerabilities in Cisco TelePresence Collaboration…7.1
Are you affected by CVE-2022-20949?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST