CVE-2022-20940

CVE-2022-20940 is a medium-severity vulnerability affecting Cisco Firepower Threat Defense (FTD) Software. It allows an unauthenticated, remote attacker to gain sensitive information due to improper countermeasures against a Bleichenbacher attack in the TLS handler when SSL decryption policies are in use. An attacker could exploit this by sending crafted TLS messages, enabling cryptanalytic operations to decrypt previously captured TLS sessions. There is no public exploit code available, it is not listed in CISA's KEV catalog, and there is minimal community discussion or media coverage, suggesting low active exploitation or public awareness.