CVE-2020-3299Protection Mechanism Failure in Cisco Firepower Threat Defense

Severity
5.8MEDIUMNVD
EPSS
1.1%
top 21.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 21
Latest updateMay 24

Description

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for HTTP. The vulnerability is due to incorrect detection of modified HTTP packets used in chunked responses. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured File Policy for HTTP packets and deliver a

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

🔴Vulnerability Details

3
GHSA
GHSA-j2v5-cw33-rvx6: Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a2022-05-24
CVEList
Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability2020-10-21
OSV
CVE-2020-3299: Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a2020-10-21

📋Vendor Advisories

1
Cisco
Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability2020-10-21
CVE-2020-3299 — Protection Mechanism Failure in Cisco | cvebase