csirt@kutim:~/threat-intel/cve/CVE-2026-20065

Katalog CVE

CVSS 5.8 · Medium EPSS 0,38%

Kerentanan Improper Locking pada cisco snort, cisco secure firewall threat defense +1 lainnya. Skor CVSS 3.1 5.8 (Medium) menurut cisco.com.

Deskripsi (NVD)

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in the binder module initialization logic of the Snort Detection Engine. An attacker could exploit this vulnerability by sending certain packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine restarts unexpectedly.

Rincian

Terbit di NVD
4 Maret 2026
Terakhir diubah
19 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
5.8 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-667: Improper Locking
EPSS (30 hari)
0,38% peluang dieksploitasi; lebih tinggi dari 30,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco snort Versi 3.0.0-233 hingga sebelum 3.6.3.0
cisco secure firewall threat defense Versi 7.0.0
cisco secure firewall threat defense Versi 7.0.0.1
cisco secure firewall threat defense Versi 7.0.1
cisco secure firewall threat defense Versi 7.0.1.1
cisco secure firewall threat defense Versi 7.0.2
cisco secure firewall threat defense Versi 7.0.2.1
cisco secure firewall threat defense Versi 7.0.3
cisco secure firewall threat defense Versi 7.0.4
cisco secure firewall threat defense Versi 7.0.5
cisco secure firewall threat defense Versi 7.0.6
cisco secure firewall threat defense Versi 7.0.6.1
cisco secure firewall threat defense Versi 7.0.6.2
cisco secure firewall threat defense Versi 7.0.6.3
cisco secure firewall threat defense Versi 7.0.7
cisco secure firewall threat defense Versi 7.0.8
cisco secure firewall threat defense Versi 7.0.8.1
cisco secure firewall threat defense Versi 7.1.0
cisco secure firewall threat defense Versi 7.1.0.1
cisco secure firewall threat defense Versi 7.1.0.2
cisco secure firewall threat defense Versi 7.1.0.3
cisco secure firewall threat defense Versi 7.2.0
cisco secure firewall threat defense Versi 7.2.0.1
cisco secure firewall threat defense Versi 7.2.1
cisco secure firewall threat defense Versi 7.2.2
cisco secure firewall threat defense Versi 7.2.3
cisco secure firewall threat defense Versi 7.2.4
cisco secure firewall threat defense Versi 7.2.4.1
cisco secure firewall threat defense Versi 7.2.5
cisco secure firewall threat defense Versi 7.2.5.1
cisco secure firewall threat defense Versi 7.2.5.2
cisco secure firewall threat defense Versi 7.2.6
cisco secure firewall threat defense Versi 7.2.7
cisco secure firewall threat defense Versi 7.2.8
cisco secure firewall threat defense Versi 7.2.8.1
cisco secure firewall threat defense Versi 7.2.9
cisco secure firewall threat defense Versi 7.2.10
cisco secure firewall threat defense Versi 7.2.10.2
cisco secure firewall threat defense Versi 7.3.0
cisco secure firewall threat defense Versi 7.3.1
cisco secure firewall threat defense Versi 7.3.1.1
cisco secure firewall threat defense Versi 7.3.1.2
cisco secure firewall threat defense Versi 7.4.0
cisco secure firewall threat defense Versi 7.4.1
cisco secure firewall threat defense Versi 7.4.1.1
cisco secure firewall threat defense Versi 7.4.2
cisco secure firewall threat defense Versi 7.4.2.1
cisco secure firewall threat defense Versi 7.4.2.2
cisco secure firewall threat defense Versi 7.4.2.3
cisco secure firewall threat defense Versi 7.4.2.4
cisco secure firewall threat defense Versi 7.6.0
cisco unified threat defense snort intrusion prevention system engine Versi 17.2.1r
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.1a
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.2
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.3
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.4
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.4a
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.5
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.6
cisco unified threat defense snort intrusion prevention system engine Versi 17.3.7

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 122 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.