CyberRota Analysis
AI-GeneratedA vulnerability in the rate-limiting process for syslog messages in Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to send a flood of TCP SYN packets, leading to high CPU utilization and potential denial of service (DoS) conditions. Organizations using these Cisco products should prioritize addressing this issue to prevent performance degradation and ensure network availability. Immediate action is recommended for those managing critical infrastructure or sensitive environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper rate limiting for syslog message 419002. An attacker could exploit this vulnerability by sending a flood of TCP synchronization (SYN) packets to an affected device. A successful exploit could allow the attacker to cause high CPU utilization, resulting in performance degradation.