[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fH51r4enCxk2vV-pdE918gtHseeM85btsWYoG4dSSUXo":3,"g5a-risk:CVE-2022-20943":238},{"success":4,"data":5,"meta":235},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":36,"affectedProducts":37,"affectedProductsCount":117,"references":118,"referencesCount":123,"weaknesses":124,"weaknessesCount":123,"isActivelyExploited":133,"cisaInfo":26,"otxData":26,"relatedBlogPosts":134,"seoMetadata":135,"configurations":160,"relatedVendorCves":233,"notableEvents":234},"CVE-2022-20943","What is CVE-2022-20943?","Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service (DoS) condition on an affected device.\r\n\r These vulnerabilities are due to improper management of system resources when the Snort detection engine is processing SMB2 traffic. An attacker could exploit these vulnerabilities by sending a high rate of certain types of SMB2 packets through an affected device. A successful exploit could allow the attacker to trigger a reload of the Snort process, resulting in a DoS condition.\r\n\r Note: When the snort preserve-connection option is enabled for the Snort detection engine, a successful exploit could also allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network. The snort preserve-connection setting is enabled by default. See the Details [\"#details\"] section of this advisory for more information.\r\n\r Note: Only products that have Snort 3 configured are affected. Products that are configured with Snort 2 are not affected.","Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unaut...","2022-11-15T21:15:35.077","2024-01-25T17:15:21.03",5.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:N\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","CHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"ykramarz@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00983,[35,35,35,35,35,33,33],0.00949,"Medium",[38,43,46,49,52,56,59,62,65,68,71,74,77,80,83,86,89,92,95,98,101,104,107,110,113],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"cisco","firepower_threat_defense","7.0.0","cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"7.0.0.1","cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"7.0.1","cpe:2.3:a:cisco:firepower_threat_defense:7.0.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":50,"criteria":51,"vulnerable":4},"7.0.1.1","cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":54,"criteria":55,"vulnerable":4},"cyber_vision","3.0.0","cpe:2.3:a:cisco:cyber_vision:3.0.0:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":57,"criteria":58,"vulnerable":4},"3.0.1","cpe:2.3:a:cisco:cyber_vision:3.0.1:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":60,"criteria":61,"vulnerable":4},"3.0.2","cpe:2.3:a:cisco:cyber_vision:3.0.2:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":63,"criteria":64,"vulnerable":4},"3.0.3","cpe:2.3:a:cisco:cyber_vision:3.0.3:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":66,"criteria":67,"vulnerable":4},"3.0.5","cpe:2.3:a:cisco:cyber_vision:3.0.5:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":69,"criteria":70,"vulnerable":4},"3.0.6","cpe:2.3:a:cisco:cyber_vision:3.0.6:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":72,"criteria":73,"vulnerable":4},"3.1.0","cpe:2.3:a:cisco:cyber_vision:3.1.0:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":75,"criteria":76,"vulnerable":4},"3.1.1","cpe:2.3:a:cisco:cyber_vision:3.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":78,"criteria":79,"vulnerable":4},"3.1.2","cpe:2.3:a:cisco:cyber_vision:3.1.2:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":81,"criteria":82,"vulnerable":4},"3.2.0","cpe:2.3:a:cisco:cyber_vision:3.2.0:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":84,"criteria":85,"vulnerable":4},"3.2.1","cpe:2.3:a:cisco:cyber_vision:3.2.1:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":87,"criteria":88,"vulnerable":4},"3.2.2","cpe:2.3:a:cisco:cyber_vision:3.2.2:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":90,"criteria":91,"vulnerable":4},"3.2.3","cpe:2.3:a:cisco:cyber_vision:3.2.3:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":93,"criteria":94,"vulnerable":4},"3.2.4","cpe:2.3:a:cisco:cyber_vision:3.2.4:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":96,"criteria":97,"vulnerable":4},"4.0.0","cpe:2.3:a:cisco:cyber_vision:4.0.0:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":99,"criteria":100,"vulnerable":4},"4.0.1","cpe:2.3:a:cisco:cyber_vision:4.0.1:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":102,"criteria":103,"vulnerable":4},"4.0.2","cpe:2.3:a:cisco:cyber_vision:4.0.2:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":105,"criteria":106,"vulnerable":4},"4.0.3","cpe:2.3:a:cisco:cyber_vision:4.0.3:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":108,"criteria":109,"vulnerable":4},"4.1.0","cpe:2.3:a:cisco:cyber_vision:4.1.0:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":111,"criteria":112,"vulnerable":4},"4.1.1","cpe:2.3:a:cisco:cyber_vision:4.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":114,"version":115,"criteria":116,"vulnerable":4},"meraki_mx_security_appliance_firmware","*","cpe:2.3:o:cisco:meraki_mx_security_appliance_firmware:*:*:*:*:*:*:*:*",25,[119],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-snort-smb-3nfhJtr","Cisco",[],1,[125],{"id":126,"name":127,"description":128,"extendedDescription":129,"status":130,"abstraction":131,"structure":132},"CWE-244","Improper Clearing of Heap Memory Before Release ('Heap Inspection')","Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.","When sensitive data such as a password or an encryption key is not removed from memory, it could be exposed to an attacker using a \"heap inspection\" attack that reads the sensitive data using memory dumps or other methods. The realloc() function is commonly used to increase the size of a block of allocated memory. This operation often requires copying the contents of the old memory block into a new and larger block. This operation leaves the contents of the original block intact but inaccessible to the program, preventing the program from being able to scrub sensitive data from memory. If an attacker can later examine the contents of a memory dump, the sensitive data could be exposed.","Draft","Variant","Simple",false,[],{"title":136,"metaDescription":137,"keywords":138,"canonicalUrl":139,"structuredData":140},"What is CVE-2022-20943? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-20943, a medium severity cyber security vulnerability from 2022. Multiple vulnerabilities in the Server Message Block Vers...","CVE-2022-20943, CVE-2022-20943 vulnerability, CVE-2022-20943 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, cisco security, firepower_threat_defense vulnerability, cyber_vision vulnerability","\u002Fwhat-is\u002Fcve-2022-20943",{"@context":141,"@type":142,"headline":136,"description":137,"datePublished":10,"dateModified":11,"author":143,"publisher":147,"about":151,"mainEntityOfPage":155,"articleSection":158,"keywords":159},"https:\u002F\u002Fschema.org","TechArticle",{"@type":144,"name":145,"url":146},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":144,"name":145,"url":146,"logo":148},{"@type":149,"url":150},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":152,"name":6,"description":153,"additionalType":154},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":156,"@id":157},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-20943","Cybersecurity","CVE-2022-20943, CVE-2022-20943 vulnerability, CVE-2022-20943 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[161,174,218],{"Operator":26,"Negate":26,"Nodes":162},[163],{"Operator":164,"Negate":26,"CPEMatch":165},"OR",[166,168,170,172],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BBCA75A6-0A3E-4393-8884-9F3CE190641E",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3F3C12D3-7662-46C5-9E88-D1BE6CF605E0",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"046B53A0-6BC1-461A-9C28-C534CE12C4BD",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":173,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3CA889E1-4E8F-4ECE-88AC-7A240D5CBF0A",{"Operator":26,"Negate":26,"Nodes":175},[176],{"Operator":164,"Negate":26,"CPEMatch":177},[178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3297323C-B263-45EA-90CE-2B8415C9E498",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"797AD8A4-083B-4A9E-A49D-65EE828E1637",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4EB16212-A9DC-4C8C-B220-9619C65436EB",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9C64043F-1F0D-47F7-AEEE-309B239891DB",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E1F7F871-C211-4DC6-8020-1075405BAE17",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"30E42800-B7C9-4006-8B7A-5A9A5F5EB234",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EE33F541-232E-4432-AB41-EC0500A85E6D",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8D5B5FDC-79B2-447E-816F-1F630508A889",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B806EAC6-E1B2-40FB-9B2F-6AFB4A16AF89",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D7BAC55C-C114-4E64-BC9E-9000B8C016CB",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"925E6B9B-F7F1-4ED8-8431-282A1061B527",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A10EDC3E-0EF6-47DD-834D-51C5BBCC13EC",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BB5F799E-6696-4391-9B58-06715FA4086A",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EE31D26B-CD47-4853-B1C3-2E50B0882AFF",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":207,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2758714C-4E9A-4442-9AD1-82D8E43995C9",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0F63C0E4-99A9-4D4F-BCF9-EF5F5455C04C",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"13EA024C-97A4-4D33-BC3E-51DB77C51E76",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4A2224A9-96D6-4621-B3AD-D5E1C6884937",{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D2B27A1F-E66D-4ADE-83B2-6D2457F49CC4",{"Vulnerable":4,"Criteria":112,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"50511288-D7A4-4EAE-8238-1E899EF16A9B",{"Operator":26,"Negate":26,"Nodes":219},[220],{"Operator":164,"Negate":26,"CPEMatch":221},[222,225,229],{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":224,"VersionEndIncluding":26},"B2177697-7563-44BB-BD3B-D6F622F83B0B","16.6.7",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":226,"VersionStartExcluding":26,"VersionStartIncluding":227,"VersionEndExcluding":228,"VersionEndIncluding":26},"09700C66-036B-47E2-9E3B-85CD44DDEF4F","17.0","17.11.1",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":230,"VersionStartExcluding":26,"VersionStartIncluding":231,"VersionEndExcluding":232,"VersionEndIncluding":26},"DD09153A-3BA1-4A5C-A730-0E9754E49ECE","18.0","18.1.3",[],[],{"lastModified":11,"cacheTime":236,"version":237},1792375449019,"2.0",{"score":239,"band":240,"action":241,"scoredAt":242},29,"Low","Monitor","2026-10-16T06:56:16.425992+00:00"]