CVE-2025-20217

CWE-8354 documents4 sources
Severity
8.6HIGH
EPSS
0.1%
top 81.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Cisco Firepower Threat Defense Software
Timeline
PublishedAug 14

Description

A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incorrect processing of traffic that is inspected by an affected device. An attacker could exploit this vulnerability by sending crafted traffic through the affected device. A successful exploit could allow the a…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-w2gg-j3hp-gfqv: A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could al↗2025-08-14
▶
CVEList
Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability↗2025-08-14
▶

📋Vendor Advisories

1
Cisco
Cisco Secure Firewall Threat Defense Software Snort 3 Denial of Service Vulnerability↗2025-08-14
▶
CVE-2025-20217 (HIGH CVSS 8.6) | A vulnerability in the packet inspe | cvebase.io