5.8

CVE-2024-20407

EPSS 0.2%
Veröffentlicht 23.10.2024 18:15:08
Zuletzt bearbeitet 05.08.2025 14:53:15
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are not affected by this vulnerability. 

 This vulnerability is due to a logic error when handling embryonic (half-open) TCP connections. An attacker could exploit this vulnerability by sending a crafted traffic pattern through an affected device. A successful exploit could allow unintended traffic to enter the network protected by the affected device.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

NVD 90 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Firepower Threat Defense Version6.2.3

Cisco ≫ Firepower Threat Defense Version6.2.3.1

Cisco ≫ Firepower Threat Defense Version6.2.3.2

Cisco ≫ Firepower Threat Defense Version6.2.3.3

Cisco ≫ Firepower Threat Defense Version6.2.3.4

Cisco ≫ Firepower Threat Defense Version6.2.3.5

Cisco ≫ Firepower Threat Defense Version6.2.3.6

Cisco ≫ Firepower Threat Defense Version6.2.3.7

Cisco ≫ Firepower Threat Defense Version6.2.3.8

Cisco ≫ Firepower Threat Defense Version6.2.3.9

Cisco ≫ Firepower Threat Defense Version6.2.3.10

Cisco ≫ Firepower Threat Defense Version6.2.3.11

Cisco ≫ Firepower Threat Defense Version6.2.3.12

Cisco ≫ Firepower Threat Defense Version6.2.3.13

Cisco ≫ Firepower Threat Defense Version6.2.3.14

Cisco ≫ Firepower Threat Defense Version6.2.3.15

Cisco ≫ Firepower Threat Defense Version6.2.3.16

Cisco ≫ Firepower Threat Defense Version6.2.3.17

Cisco ≫ Firepower Threat Defense Version6.2.3.18

Cisco ≫ Firepower Threat Defense Version6.4.0

Cisco ≫ Firepower Threat Defense Version6.4.0.1

Cisco ≫ Firepower Threat Defense Version6.4.0.2

Cisco ≫ Firepower Threat Defense Version6.4.0.3

Cisco ≫ Firepower Threat Defense Version6.4.0.4

Cisco ≫ Firepower Threat Defense Version6.4.0.5

Cisco ≫ Firepower Threat Defense Version6.4.0.6

Cisco ≫ Firepower Threat Defense Version6.4.0.7

Cisco ≫ Firepower Threat Defense Version6.4.0.8

Cisco ≫ Firepower Threat Defense Version6.4.0.9

Cisco ≫ Firepower Threat Defense Version6.4.0.10

Cisco ≫ Firepower Threat Defense Version6.4.0.11

Cisco ≫ Firepower Threat Defense Version6.4.0.12

Cisco ≫ Firepower Threat Defense Version6.4.0.13

Cisco ≫ Firepower Threat Defense Version6.4.0.14

Cisco ≫ Firepower Threat Defense Version6.4.0.15

Cisco ≫ Firepower Threat Defense Version6.4.0.16

Cisco ≫ Firepower Threat Defense Version6.4.0.17

Cisco ≫ Firepower Threat Defense Version6.4.0.18

Cisco ≫ Firepower Threat Defense Version6.6.0

Cisco ≫ Firepower Threat Defense Version6.6.0.1

Cisco ≫ Firepower Threat Defense Version6.6.1

Cisco ≫ Firepower Threat Defense Version6.6.3

Cisco ≫ Firepower Threat Defense Version6.6.4

Cisco ≫ Firepower Threat Defense Version6.6.5

Cisco ≫ Firepower Threat Defense Version6.6.5.1

Cisco ≫ Firepower Threat Defense Version6.6.5.2

Cisco ≫ Firepower Threat Defense Version6.6.7

Cisco ≫ Firepower Threat Defense Version6.6.7.1

Cisco ≫ Firepower Threat Defense Version6.6.7.2

Cisco ≫ Firepower Threat Defense Version6.7.0

Cisco ≫ Firepower Threat Defense Version6.7.0.1

Cisco ≫ Firepower Threat Defense Version6.7.0.2

Cisco ≫ Firepower Threat Defense Version6.7.0.3

Cisco ≫ Firepower Threat Defense Version7.0.0

Cisco ≫ Firepower Threat Defense Version7.0.0.1

Cisco ≫ Firepower Threat Defense Version7.0.1

Cisco ≫ Firepower Threat Defense Version7.0.1.1

Cisco ≫ Firepower Threat Defense Version7.0.2

Cisco ≫ Firepower Threat Defense Version7.0.2.1

Cisco ≫ Firepower Threat Defense Version7.0.3

Cisco ≫ Firepower Threat Defense Version7.0.4

Cisco ≫ Firepower Threat Defense Version7.0.5

Cisco ≫ Firepower Threat Defense Version7.0.6

Cisco ≫ Firepower Threat Defense Version7.0.6.1

Cisco ≫ Firepower Threat Defense Version7.0.6.2

Cisco ≫ Firepower Threat Defense Version7.1.0

Cisco ≫ Firepower Threat Defense Version7.1.0.1

Cisco ≫ Firepower Threat Defense Version7.1.0.2

Cisco ≫ Firepower Threat Defense Version7.1.0.3

Cisco ≫ Firepower Threat Defense Version7.2.0

Cisco ≫ Firepower Threat Defense Version7.2.0.1

Cisco ≫ Firepower Threat Defense Version7.2.1

Cisco ≫ Firepower Threat Defense Version7.2.2

Cisco ≫ Firepower Threat Defense Version7.2.3

Cisco ≫ Firepower Threat Defense Version7.2.4

Cisco ≫ Firepower Threat Defense Version7.2.4.1

Cisco ≫ Firepower Threat Defense Version7.2.5

Cisco ≫ Firepower Threat Defense Version7.2.5.1

Cisco ≫ Firepower Threat Defense Version7.2.5.2

Cisco ≫ Firepower Threat Defense Version7.2.6

Cisco ≫ Firepower Threat Defense Version7.2.7

Cisco ≫ Firepower Threat Defense Version7.2.8

Cisco ≫ Firepower Threat Defense Version7.2.8.1

Cisco ≫ Firepower Threat Defense Version7.3.0

Cisco ≫ Firepower Threat Defense Version7.3.1

Cisco ≫ Firepower Threat Defense Version7.3.1.1

Cisco ≫ Firepower Threat Defense Version7.3.1.2

Cisco ≫ Firepower Threat Defense Version7.4.0

Cisco ≫ Firepower Threat Defense Version7.4.1

Cisco ≫ Firepower Threat Defense Version7.4.1.1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.421

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@cisco.com	5.8	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-bypass-PTry37fX

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20407

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20407

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20407

EUVD