Skip to content
fr Sign in
5.8 Medium

CVE-2026-20057 Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which…

Description

Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.    This vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition.

Affected products and versions

Product Affected versions Fixed in
Cisco Cyber Vision 5.3 5.3.0 → 5.3.1 No fix stated
Cisco Cyber Vision 5.2 5.2.0 → 5.2.1 No fix stated
Cisco Cyber Vision 5.1 5.1.0 → 5.1.3 No fix stated
Cisco Cyber Vision 5.0 5.0.0 → 5.0.2 No fix stated
Cisco Cyber Vision 4.4 4.4.0 → 4.4.3 No fix stated
Cisco Cyber Vision 4.3 4.3.0 → 4.3.3 No fix stated
Cisco Cyber Vision 4.2 4.2.X → 4.2.6 No fix stated
Cisco Cyber Vision 4.1 4.1.0 → 4.1.7 No fix stated
Cisco Cyber Vision 4.0 4.0.0 → 4.0.3 No fix stated
Show the 15 other branches
Product Affected versions Fixed in
Cisco Cyber Vision 3.2 3.2.0 → 3.2.4 No fix stated
Cisco Cyber Vision 3.1 3.1.0 → 3.1.2 No fix stated
Cisco Cyber Vision 3.0 3.0.0 → 3.0.6 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.7 7.7.0 → 7.7.10.1 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.6 7.6.0 → 7.6.2.1 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.4 7.4.0 → 7.4.3 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.3 7.3.0 → 7.3.1.2 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.2 7.2.0 → 7.2.10.2 No fix stated
Cisco UTD SNORT IPS Engine Software 17.18 17.18.1a → 17.18.2 No fix stated
Cisco UTD SNORT IPS Engine Software 17.17.1 No fix stated
Cisco UTD SNORT IPS Engine Software 17.16.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.15 17.15.1a → 17.15.4 No fix stated
Cisco UTD SNORT IPS Engine Software 17.14.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.13.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.12 17.12.1a → 17.12.6 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Cyber Vision

The 20 CVEs of Cisco Cyber Vision →
CVE-2026-20356 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.5 High CVE-2026-20236 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.5 High CVE-2026-20291 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.8 High CVE-2026-20221 Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel… 5.8 Medium
Track this CVE