CVE-2023-20083
CVSS 3.1 Score 8.6 of 10 (high)
Details
Summary
CVE-2023-20083 is a vulnerability affecting ICMPv6 inspection in Cisco Firepower Threat Defense (FTD) Software when using the Snort 2 detection engine. This issue allows unauthenticated, remote attackers to cause a denial of service (DoS) condition by sending crafted ICMPv6 packets. The vulnerability arises from improper error checking in parsing ICMPv6 header fields, resulting in CPU resource exhaustion and traffic processing halt. Management traffic is not impacted by this flaw. To mitigate the issue, either the Snort 2 Detection Engine or the affected Cisco FTD device may need to be restarted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco Firepower Threat Defense
Affected Vendors
- Cisco Systems Inc
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions