CVE-2022-20927: Cisco Adaptive Security Appliance Software

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.

Affected products

• Cisco Adaptive Security Appliance Software: version 9.13.1 only; version 9.13.1.2 only; version 9.13.1.7 only; version 9.13.1.10 only; version 9.13.1.12 only; version 9.13.1.13 only; …
• Cisco Firepower Services Software For ASA: affected versions not specified
• Cisco Secure Firewall Threat Defense: from 6.5.0, up to and including 6.5.0.5; from 6.7.0, up to and including 6.7.0.3; version 6.6.0 only; version 6.6.0.1 only; version 6.6.1 only; version 6.6.3 only; …

Published 2022-11-15. Last modified 2026-08-11.