CVE-2022-20854

HIGH

7.5

CVSS Score

Published: November 10, 2022 at 05:31 PM UTC

Updated: August 11, 2026 at 07:33 PM UTC

3 products affected across 1 vendorSecure Firewall Threat DefenseSecure Firewall Management CenterFirepower Management Center

Using Cisco Firepower Management Center by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Firepower Management Center - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.9%

Description

A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when an SSH session fails to be established. An attacker could exploit this vulnerability by sending a high rate of crafted SSH connections to the instance. A successful exploit could allow the attacker to cause resource exhaustion, resulting in a reboot on the affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Secure Firewall Management Center · Cisco

95%

6.1.0 ≤ v ≤ 6.1.0.76.2.0 ≤ v ≤ 6.2.0.66.2.2 ≤ v ≤ 6.2.2.56.2.3 ≤ v ≤ 6.2.3.186.3.0 ≤ v ≤ 6.3.0.56.4.0 ≤ v ≤ 6.4.0.156.5.0 ≤ v ≤ 6.5.0.56.7.0 ≤ v ≤ 6.7.0.36.2.1 6.6.0 6.6.0.1 6.6.1 6.6.3 6.6.4 6.6.5 6.6.5.1 6.6.5.2 7.0.0 7.0.0.1 7.0.1 7.0.1.1 7.0.2 7.0.2.1 7.0.3 7.0.4

Secure Firewall Threat Defense · Cisco

95%