CyberRota Analysis
AI-GeneratedA vulnerability in the TLS 1.3 implementation of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to send crafted packets that can cause the device to reload unexpectedly, leading to a denial of service (DoS) condition. This issue arises from improper buffer management during the TLS 1.3 connection, affecting both data and user-management traffic. Organizations using Cisco FTD Software should prioritize addressing this vulnerability to maintain service availability and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper buffer management during the TLS 1.3 connection. An attacker could exploit this vulnerability by sending a crafted TLS 1.3 packet to an affected system through a TLS 1.3-enabled listening socket. A successful exploit could allow the attacker to cause the LINA process to crash, which would cause the device to reload. The reload can happen before or after authentication of the connection.Note: TLS 1.3 connections include both data traffic and user-management traffic.