csirt@kutim:~/threat-intel/cve/CVE-2026-20068

Katalog CVE

CVSS 5.8 · Medium EPSS 0,43%

Kerentanan Uncaught Exception pada cisco snort, cisco cyber vision +1 lainnya. Skor CVSS 3.1 5.8 (Medium) menurut cisco.com.

Deskripsi (NVD)

Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when parsing remote procedure call (RPC) data. An attacker could exploit this vulnerability by sending crafted RPC packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts.

Rincian

Terbit di NVD
4 Maret 2026
Terakhir diubah
18 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
5.8 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-248: Uncaught Exception
EPSS (30 hari)
0,43% peluang dieksploitasi; lebih tinggi dari 35,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco snort Versi 3.0.0-233 hingga sebelum 3.9.2.0
cisco cyber vision Versi 3.0.0
cisco cyber vision Versi 3.0.1
cisco cyber vision Versi 3.0.2
cisco cyber vision Versi 3.0.3
cisco cyber vision Versi 3.0.4
cisco cyber vision Versi 3.0.5
cisco cyber vision Versi 3.0.6
cisco cyber vision Versi 3.1.0
cisco cyber vision Versi 3.1.1
cisco cyber vision Versi 3.1.2
cisco cyber vision Versi 3.2.0
cisco cyber vision Versi 3.2.1
cisco cyber vision Versi 3.2.2
cisco cyber vision Versi 3.2.3
cisco cyber vision Versi 3.2.4
cisco cyber vision Versi 4.0.0
cisco cyber vision Versi 4.0.1
cisco cyber vision Versi 4.0.2
cisco cyber vision Versi 4.0.3
cisco cyber vision Versi 4.1.0
cisco cyber vision Versi 4.1.1
cisco cyber vision Versi 4.1.2
cisco cyber vision Versi 4.1.3
cisco cyber vision Versi 4.1.4
cisco cyber vision Versi 4.1.5
cisco cyber vision Versi 4.1.6
cisco cyber vision Versi 4.1.7
cisco cyber vision Versi 4.2.0
cisco cyber vision Versi 4.2.1
cisco cyber vision Versi 4.2.2
cisco cyber vision Versi 4.2.3
cisco cyber vision Versi 4.2.4
cisco cyber vision Versi 4.2.6
cisco cyber vision Versi 4.3.0
cisco cyber vision Versi 4.3.1
cisco cyber vision Versi 4.3.2
cisco cyber vision Versi 4.3.3
cisco cyber vision Versi 4.4.0
cisco cyber vision Versi 4.4.1
cisco cyber vision Versi 4.4.2
cisco cyber vision Versi 4.4.3
cisco cyber vision Versi 5.0.0
cisco cyber vision Versi 5.0.1
cisco cyber vision Versi 5.0.2
cisco cyber vision Versi 5.1.0
cisco cyber vision Versi 5.1.1
cisco cyber vision Versi 5.1.2
cisco cyber vision Versi 5.1.3
cisco cyber vision Versi 5.2.0
cisco cyber vision Versi 5.2.1
cisco cyber vision Versi 5.3.0
cisco cyber vision Versi 5.3.1
cisco cyber vision Versi 5.3.2
cisco secure firewall threat defense Versi 7.2.4
cisco secure firewall threat defense Versi 7.2.4.1
cisco secure firewall threat defense Versi 7.2.5
cisco secure firewall threat defense Versi 7.2.5.1
cisco secure firewall threat defense Versi 7.2.5.2
cisco secure firewall threat defense Versi 7.2.6

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 153 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.