Skip to content
5.8 Medium

CVE-2026-20290 A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense…

Description

A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart. This vulnerability is due to incomplete validation of the SSL certificate. An attacker could exploit this vulnerability by sending a crafted SSL connection setup request to be parsed by Snort 2. A successful exploit could allow the attacker to cause the Snort 2 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Firewall Threat Defense (FTD) Software 7.6 7.6.0 → 7.6.4 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.4 7.4.0 → 7.4.7 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.3 7.3.0 → 7.3.1.2 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.2 7.2.0 → 7.2.11 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.0 7.0.0 → 7.0.9 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 81 CVEs of Cisco Secure Firewall Threat Defense (FTD) Software →
Track this CVE