cisco ios xe, cisco secure firewall management center, cisco secure firewall threat defense +1 lainnya
CVSS 5.3 · Medium EPSS 2,2%
Kerentanan Always-Incorrect Control Flow Implementation pada cisco ios xe, cisco secure firewall management center +2 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.
Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | ios xe | Semua versi sebelum 17.4.1 |
| cisco | secure firewall management center | Versi 2.9.14.0 |
| cisco | secure firewall management center | Versi 2.9.14.14 |
| cisco | secure firewall management center | Versi 2.9.15 |
| cisco | secure firewall management center | Versi 2.9.16 |
| cisco | secure firewall management center | Versi 2.9.17 |
| cisco | secure firewall threat defense | Semua versi sebelum 6.5.0.5 |
| snort | snort | Semua versi sebelum 2.9.14 |