7.5
Élevée
CVE-2022-20685 A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker…
Description
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Cyber Vision 4.0 | 4.0.0 → 4.0.1 | Pas de correctif indiqué |
| Cisco Cyber Vision 3.2 | 3.2.0 → 3.2.4 | Pas de correctif indiqué |
| Cisco Cyber Vision 3.1 | 3.1.0 → 3.1.2 | Pas de correctif indiqué |
| Cisco Cyber Vision 3.0 | 3.0.0 → 3.0.6 | Pas de correctif indiqué |
| Cisco Firepower Threat Defense Software 7.0 | 7.0.0 → 7.0.0.1 | Pas de correctif indiqué |
| Cisco Firepower Threat Defense Software 6.7 | 6.7.0 → 6.7.0.3 | Pas de correctif indiqué |
| Cisco Firepower Threat Defense Software 6.6 | 6.6.0 → 6.6.5 | Pas de correctif indiqué |
| Cisco Firepower Threat Defense Software 6.4 | 6.4.0 → 6.4.0.12 | Pas de correctif indiqué |
| Cisco Firepower Threat Defense Software 6.2 | 6.2.3 → 6.2.3.18 | Pas de correctif indiqué |
Afficher les 10 autres branches Masquer les 10 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco UTD SNORT IPS Engine Software | 17.7.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.6.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.5 | 17.5.1a → 17.5.1 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.4 | 17.4.1a → 17.4.2 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.3 | 17.3.1a → 17.3.4 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.2.1r | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.1.1 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 16.12 | 16.12.1a → 16.12.6 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 16.6 | 16.6.1 → 16.6.10 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 3.17 | 3.17.0S → 3.17.1S | Pas de correctif indiqué |
Références
- cisco-sa-snort-dos-9D3hJLuj sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Cyber Vision
Les 20 CVE de Cisco Cyber Vision →
CVE-2026-20356
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…
7.5
Élevée
CVE-2026-20236
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…
7.5
Élevée
CVE-2026-20291
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…
7.8
Élevée
CVE-2026-20221
Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel…
5.8
Moyenne