Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability

CVE-2024-20339

Summary

A vulnerability exists within the TLS processing capabilities in Cisco Firepower Threat Defense (FTD) Software that affects the Cisco Firepower 2100 Series. This issue allows unauthenticated, remote attackers to exploit the TLS traffic processing, which can lead to a denial of service condition. By sending specific TLS packets over IPv4, an attacker may force an affected device to reload. Such exploitability can cause significant disruption in traffic handling, affecting network operations and security protocols in place. It is crucial for users and administrators of affected products to apply necessary mitigations and patches to safeguard their systems from potential exploitation.

References