Read the docs
TI-2022-05486 Aliases CVE-2022-20927GHSA-4g76-357g-vr49

Buffer overflow in Cisco Adaptive Security Appliance Software

Priority LOW 34CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.

Why it matters now

EPSS 0.00591 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1; 9.14.1.10; 9.14.1.15; 9.14.1.19; 9.14.1.30; 9.14.2; 9.14.2.4; 9.14.2.8; 9.14.2.13; 9.14.2.15; 9.14.3; 9.14.3.1; 9.14.3.9; 9.14.3.11; 9.14.3.13; 9.14.3.18; 9.14.3.15; 9.15.1; 9.15.1.7; 9.15.1.10; 9.15.1.15; 9.15.1.16; 9.15.1.17; 9.15.1.1; 9.15.1.21—No fix listedCNA
CiscoCisco Firepower Threat Defense Software6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; 6.6.5.1; 6.6.5.2; 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3—No fix listedCNA
CiscoCisco FirePOWER Services Software for ASAN/A—No fix listedCNA
  • Cisco Adaptive Security Appliance (ASA) Software VendorCisco Affected 9.14.1; 9.14.1.10; 9.14.1.15; 9.14.1.19; 9.14.1.30; 9.14.2; 9.14.2.4; 9.14.2.8; 9.14.2.13; 9.14.2.15; 9.14.3; 9.14.3.1; 9.14.3.9; 9.14.3.11; 9.14.3.13; 9.14.3.18; 9.14.3.15; 9.15.1; 9.15.1.7; 9.15.1.10; 9.15.1.15; 9.15.1.16; 9.15.1.17; 9.15.1.1; 9.15.1.21 Fixed in — No fix listed CNA
  • Cisco Firepower Threat Defense Software VendorCisco Affected 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; 6.6.5.1; 6.6.5.2; 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3 Fixed in — No fix listed CNA
  • Cisco FirePOWER Services Software for ASA VendorCisco Affected N/A Fixed in — No fix listed CNA

CPE configurations NVD · 43

CPEVersionsRoleVendor
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1:*:*:*:*:*:*:*9.13.1VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.2:*:*:*:*:*:*:*9.13.1.2VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.7:*:*:*:*:*:*:*9.13.1.7VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.10:*:*:*:*:*:*:*9.13.1.10VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.12:*:*:*:*:*:*:*9.13.1.12VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.13:*:*:*:*:*:*:*9.13.1.13VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.16:*:*:*:*:*:*:*9.13.1.16VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.19:*:*:*:*:*:*:*9.13.1.19VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.21:*:*:*:*:*:*:*9.13.1.21VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1:*:*:*:*:*:*:*9.14.1VulnerableCisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1:*:*:*:*:*:*:* Versions 9.13.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.2:*:*:*:*:*:*:* Versions 9.13.1.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.7:*:*:*:*:*:*:* Versions 9.13.1.7 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.10:*:*:*:*:*:*:* Versions 9.13.1.10 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.12:*:*:*:*:*:*:* Versions 9.13.1.12 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.13:*:*:*:*:*:*:* Versions 9.13.1.13 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.16:*:*:*:*:*:*:* Versions 9.13.1.16 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.19:*:*:*:*:*:*:* Versions 9.13.1.19 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.21:*:*:*:*:*:*:* Versions 9.13.1.21 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1:*:*:*:*:*:*:* Versions 9.14.1 Vulnerable ·Cisco
Show 33 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.10:*:*:*:*:*:*:*9.14.1.10VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.15:*:*:*:*:*:*:*9.14.1.15VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.19:*:*:*:*:*:*:*9.14.1.19VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.30:*:*:*:*:*:*:*9.14.1.30VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2:*:*:*:*:*:*:*9.14.2VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.4:*:*:*:*:*:*:*9.14.2.4VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.8:*:*:*:*:*:*:*9.14.2.8VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.13:*:*:*:*:*:*:*9.14.2.13VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.15:*:*:*:*:*:*:*9.14.2.15VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3:*:*:*:*:*:*:*9.14.3VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.1:*:*:*:*:*:*:*9.14.3.1VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.9:*:*:*:*:*:*:*9.14.3.9VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.11:*:*:*:*:*:*:*9.14.3.11VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.13:*:*:*:*:*:*:*9.14.3.13VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.15:*:*:*:*:*:*:*9.14.3.15VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.18:*:*:*:*:*:*:*9.14.3.18VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1:*:*:*:*:*:*:*9.15.1VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.1:*:*:*:*:*:*:*9.15.1.1VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.7:*:*:*:*:*:*:*9.15.1.7VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.10:*:*:*:*:*:*:*9.15.1.10VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.15:*:*:*:*:*:*:*9.15.1.15VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.16:*:*:*:*:*:*:*9.15.1.16VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.17:*:*:*:*:*:*:*9.15.1.17VulnerableCisco
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.21:*:*:*:*:*:*:*9.15.1.21VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*6.5.0 – 6.5.0.5; 6.7.0 – 6.7.0.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:*6.6.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:*:*:*:*:*:*:*6.6.0.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:*:*:*:*:*:*:*6.6.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:*:*:*:*:*:*:*6.6.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:*:*:*:*:*:*:*6.6.4VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:*:*:*:*:*:*:*6.6.5VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1:*:*:*:*:*:*:*6.6.5.1VulnerableCisco
cpe:2.3:a:cisco:firepower_services_software_for_asa:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.10:*:*:*:*:*:*:* Versions 9.14.1.10 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.15:*:*:*:*:*:*:* Versions 9.14.1.15 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.19:*:*:*:*:*:*:* Versions 9.14.1.19 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.30:*:*:*:*:*:*:* Versions 9.14.1.30 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2:*:*:*:*:*:*:* Versions 9.14.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.4:*:*:*:*:*:*:* Versions 9.14.2.4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.8:*:*:*:*:*:*:* Versions 9.14.2.8 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.13:*:*:*:*:*:*:* Versions 9.14.2.13 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.15:*:*:*:*:*:*:* Versions 9.14.2.15 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3:*:*:*:*:*:*:* Versions 9.14.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.1:*:*:*:*:*:*:* Versions 9.14.3.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.9:*:*:*:*:*:*:* Versions 9.14.3.9 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.11:*:*:*:*:*:*:* Versions 9.14.3.11 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.13:*:*:*:*:*:*:* Versions 9.14.3.13 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.15:*:*:*:*:*:*:* Versions 9.14.3.15 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.18:*:*:*:*:*:*:* Versions 9.14.3.18 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1:*:*:*:*:*:*:* Versions 9.15.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.1:*:*:*:*:*:*:* Versions 9.15.1.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.7:*:*:*:*:*:*:* Versions 9.15.1.7 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.10:*:*:*:*:*:*:* Versions 9.15.1.10 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.15:*:*:*:*:*:*:* Versions 9.15.1.15 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.16:*:*:*:*:*:*:* Versions 9.15.1.16 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.17:*:*:*:*:*:*:* Versions 9.15.1.17 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.21:*:*:*:*:*:*:* Versions 9.15.1.21 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* Versions 6.5.0 – 6.5.0.5; 6.7.0 – 6.7.0.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:* Versions 6.6.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:*:*:*:*:*:*:* Versions 6.6.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:*:*:*:*:*:*:* Versions 6.6.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:*:*:*:*:*:*:* Versions 6.6.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:*:*:*:*:*:*:* Versions 6.6.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:*:*:*:*:*:*:* Versions 6.6.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1:*:*:*:*:*:*:* Versions 6.6.5.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:firepower_services_software_for_asa:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-20927
  2. 2026-10-03 Alias added: GHSA-4g76-357g-vr49

References

Other 1

  • TI-2025-14628 Buffer overflow in Cisco Secure Firewall Adaptive Security Appliance Software KEVCVSS 3.1CRITICAL 9.9
  • TI-2016-05454 Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on… KEVCVSS 3.1HIGH 8.8
  • TI-2023-06973 Authentication bypass in Cisco Adaptive Security Appliance Software KEVCVSS 3.1CRITICAL 9.1
  • TI-2026-82192 Denial of service in Cisco Secure Firewall ASA and FTD SSL VPN KEVCVSS 3.1HIGH 8.6
  • TI-2026-16533 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense… KEVCVSS 3.1HIGH 8.6
  • TI-2025-14657 Missing authorization in Cisco Secure Firewall Adaptive Security Appliance Software KEVCVSS 3.1HIGH 8.6
See all 354 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences