← CVE Intelligence

CVE-2024-20363

Cisco / Cisco Firepower Threat Defense Software PUBLISHED

Description (CNA)

Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet handling. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco Firepower Threat Defense Softwareaffected 7.4.0
Cisco / Cisco UTD SNORT IPS Engine Softwareaffected 17.6.4; affected 17.6.5; affected 17.12.1a; affected 17.12.2

CWE

CWE-290

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.