CVE-2023-20083

Summary

CVE-2023-20083 is a vulnerability affecting ICMPv6 inspection in Cisco Firepower Threat Defense (FTD) Software when using the Snort 2 detection engine. This issue allows unauthenticated, remote attackers to cause a denial of service (DoS) condition by sending crafted ICMPv6 packets. The vulnerability arises from improper error checking in parsing ICMPv6 header fields, resulting in CPU resource exhaustion and traffic processing halt. Management traffic is not impacted by this flaw. To mitigate the issue, either the Snort 2 Detection Engine or the affected Cisco FTD device may need to be restarted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.