QID 316955

A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense (FTD) Software
could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition.

Affected Products
Cisco products if they are running a vulnerable release of Cisco FTD Software,
have an SSL decryption policy enabled, and
are running one of the following hardware platforms:
ASA 5512-X Adaptive Security Appliance
ASA 5515-X Adaptive Security Appliance
ASA 5525-X Adaptive Security Appliance
ASA 5545-X Adaptive Security Appliance
ASA 5555-X Adaptive Security Appliance
Firepower Threat Defense Virtual (FTDv)
3000 Series Industrial Security Appliances (ISAs)(no support)
Firepower 1000 Series(no support)
Firepower 2100 Series(no support)

Affected Versions:
From 6.3.0 Prior to 6.4.0.12(May 2021)
From 6.5.0 Prior to 6.6.4
From 6.7.0 Prior to 6.7.0.2

QID detection logic:
The QID checks for Cisco FTD version retrieved via Unix Auth using "show version" command.

A successful exploit could allow the attacker to cause a process to crash.
This crash would then trigger a reload of the device.
No manual intervention is needed to recover the device after the reload.