Log in Start free

Vulnerability · Published Oct 23, 2024 · Assigned by cisco

CVE-2024-20351Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability

High 8.6

In plain English

A high-severity uncontrolled resource consumption in Cisco Firepower Threat Defense Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.7%top 45.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER Services could allow an unauthenticated, remote attacker to cause legitimate network traffic to be dropped, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of TCP/IP network traffic. An attacker could exploit this vulnerability by sending a large amount of TCP/IP network traffic through the affected device. A successful exploit could allow the attacker to cause the Cisco FTD device to drop network traffic, resulting in a DoS condition. The affected device must be rebooted to resolve the DoS condition.

Affected products (as reported)

VendorProductVersions
Cisco Cisco Firepower Threat Defense Software 6.2.3.146.4.0.16.2.3.76.2.36.4.0.26.2.3.96.2.3.16.2.3.2

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References