8.6
High
CVE-2024-20351 A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat…
Description
A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER Services could allow an unauthenticated, remote attacker to cause legitimate network traffic to be dropped, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of TCP/IP network traffic. An attacker could exploit this vulnerability by sending a large amount of TCP/IP network traffic through the affected device. A successful exploit could allow the attacker to cause the Cisco FTD device to drop network traffic, resulting in a DoS condition. The affected device must be rebooted to resolve the DoS condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Firepower Threat Defense Software 7.4 | 7.4.0 → 7.4.1.1 | No fix stated |
| Cisco Firepower Threat Defense Software 7.3 | 7.3.0 → 7.3.1.2 | No fix stated |
| Cisco Firepower Threat Defense Software 7.2 | 7.2.0 → 7.2.5.2 | No fix stated |
| Cisco Firepower Threat Defense Software 7.1 | 7.1.0 → 7.1.0.3 | No fix stated |
| Cisco Firepower Threat Defense Software 7.0 | 7.0.0 → 7.0.6.1 | No fix stated |
| Cisco Firepower Threat Defense Software 6.7 | 6.7.0 → 6.7.0.3 | No fix stated |
| Cisco Firepower Threat Defense Software 6.6 | 6.6.0 → 6.6.7.2 | No fix stated |
| Cisco Firepower Threat Defense Software 6.4 | 6.4.0 → 6.4.0.18 | No fix stated |
| Cisco Firepower Threat Defense Software 6.2 | 6.2.3 → 6.2.3.18 | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| firepower_threat_defense_software 6.2 | 6.2.3 → 7.4.1.1 | No fix stated |
References
- cisco-sa-sa-ftd-snort-fw-BCJTZPMu sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Firepower Threat Defense Software
The 162 CVEs of Cisco Firepower Threat Defense Software →
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…
9.0
Critical
CVE-2025-20220
A vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat…
6.0
Medium
CVE-2025-20268
A vulnerability in the Geolocation-Based Remote Access (RA) VPN feature of Cisco Secure Firewall Threat Defense (FTD)…
5.8
Medium
CVE-2025-20254
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security…
5.8
Medium