CVE-2024-20407

CWE-3994 documents4 sources

Severity

5.8MEDIUM

EPSS

0.2%

top 58.15%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Cisco Firepower Threat Defense Software Cisco Firepower Threat Defense

Timeline

PublishedOct 23

Description

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are not affected by this vulnerability. This vulnerability is due to a logic error when handling embryonic (half-open) TCP connections. An attacker could exploit this vulnerability by sending a crafted traff…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5cisco/cisco_firepower_threat_defense_software90 versions+89

▶NVDcisco/firepower_threat_defense90 versions+89

🔴Vulnerability Details

GHSA

GHSA-6vh9-9qf6-mvjj: A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software↗2024-10-23

▶

CVEList

CVE-2024-20407: A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software↗2024-10-23

▶

📋Vendor Advisories

Cisco

Cisco Firepower Threat Defense Software TCP Snort 3 Detection Engine Bypass Vulnerability↗2024-10-23

▶