Product:
Cisco Secure Firewall Threat Defense
Summary
A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. This is due to improper memory management during the inspection of TLS 1.2 encrypted traffic. An attacker could exploit this vulnerability by sending crafted TLS 1.2 encrypted traffic through an affected device, potentially causing a reload of the device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.8 | CVE-2026-20050 |
Exploitation
To exploit this vulnerability, an attacker must send specially crafted TLS 1.2 encrypted traffic to an affected device. If successful, this could lead to a denial of service condition, causing the device to reload and become temporarily unavailable.
Affected Products
- Cisco Secure Firewall Threat Defense: Vulnerable to denial of service due to improper memory management during TLS 1.2 traffic inspection.
Mitigation
To mitigate this vulnerability, it is recommended to apply any available patches or updates from Cisco. Additionally, monitoring network traffic for unusual patterns and implementing strict access controls can help reduce the risk of exploitation.