Description

Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet handling. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.

INFO

Published Date :

2024-05-22T16:52:53.274Z

Last Modified :

2024-08-01T21:59:42.321Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2024-20363 vulnerability.

Vendors Products
Cisco
  • Firepower Threat Defense
  • Snort
  • Unified Threat Defense Snort Intrusion Prevention System Engine
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-20363.

URL Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-ips-bypass-uE69KBMd cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact