5.8

CVE-2024-20407

EPSS 0.4%
Veröffentlicht 23.10.2024 18:15:08
Zuletzt bearbeitet 11.08.2026 19:33:44
Erkennungen
Login

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are not affected by this vulnerability. 

 This vulnerability is due to a logic error when handling embryonic (half-open) TCP connections. An attacker could exploit this vulnerability by sending a crafted traffic pattern through an affected device. A successful exploit could allow unintended traffic to enter the network protected by the affected device.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

NVD 90 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.1

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.2

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.3

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.4

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.5

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.6

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.7

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.8

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.9

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.10

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.11

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.12

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.13

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.14

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.15

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.16

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.17

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3.18

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.1

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.2

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.3

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.4

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.5

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.6

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.7

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.8

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.9

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.10

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.11

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.12

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.13

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.14

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.15

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.16

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.17

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.18

Cisco ≫ Secure Firewall Threat Defense Version 6.6.0

Cisco ≫ Secure Firewall Threat Defense Version 6.6.0.1

Cisco ≫ Secure Firewall Threat Defense Version 6.6.1

Cisco ≫ Secure Firewall Threat Defense Version 6.6.3

Cisco ≫ Secure Firewall Threat Defense Version 6.6.4

Cisco ≫ Secure Firewall Threat Defense Version 6.6.5

Cisco ≫ Secure Firewall Threat Defense Version 6.6.5.1

Cisco ≫ Secure Firewall Threat Defense Version 6.6.5.2

Cisco ≫ Secure Firewall Threat Defense Version 6.6.7

Cisco ≫ Secure Firewall Threat Defense Version 6.6.7.1

Cisco ≫ Secure Firewall Threat Defense Version 6.6.7.2

Cisco ≫ Secure Firewall Threat Defense Version 6.7.0

Cisco ≫ Secure Firewall Threat Defense Version 6.7.0.1

Cisco ≫ Secure Firewall Threat Defense Version 6.7.0.2

Cisco ≫ Secure Firewall Threat Defense Version 6.7.0.3

Cisco ≫ Secure Firewall Threat Defense Version 7.0.0

Cisco ≫ Secure Firewall Threat Defense Version 7.0.0.1

Cisco ≫ Secure Firewall Threat Defense Version 7.0.1

Cisco ≫ Secure Firewall Threat Defense Version 7.0.1.1

Cisco ≫ Secure Firewall Threat Defense Version 7.0.2

Cisco ≫ Secure Firewall Threat Defense Version 7.0.2.1

Cisco ≫ Secure Firewall Threat Defense Version 7.0.3

Cisco ≫ Secure Firewall Threat Defense Version 7.0.4

Cisco ≫ Secure Firewall Threat Defense Version 7.0.5

Cisco ≫ Secure Firewall Threat Defense Version 7.0.6

Cisco ≫ Secure Firewall Threat Defense Version 7.0.6.1

Cisco ≫ Secure Firewall Threat Defense Version 7.0.6.2

Cisco ≫ Secure Firewall Threat Defense Version 7.1.0

Cisco ≫ Secure Firewall Threat Defense Version 7.1.0.1

Cisco ≫ Secure Firewall Threat Defense Version 7.1.0.2

Cisco ≫ Secure Firewall Threat Defense Version 7.1.0.3

Cisco ≫ Secure Firewall Threat Defense Version 7.2.0

Cisco ≫ Secure Firewall Threat Defense Version 7.2.0.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.2

Cisco ≫ Secure Firewall Threat Defense Version 7.2.3

Cisco ≫ Secure Firewall Threat Defense Version 7.2.4

Cisco ≫ Secure Firewall Threat Defense Version 7.2.4.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.5

Cisco ≫ Secure Firewall Threat Defense Version 7.2.5.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.5.2

Cisco ≫ Secure Firewall Threat Defense Version 7.2.6

Cisco ≫ Secure Firewall Threat Defense Version 7.2.7

Cisco ≫ Secure Firewall Threat Defense Version 7.2.8

Cisco ≫ Secure Firewall Threat Defense Version 7.2.8.1

Cisco ≫ Secure Firewall Threat Defense Version 7.3.0

Cisco ≫ Secure Firewall Threat Defense Version 7.3.1

Cisco ≫ Secure Firewall Threat Defense Version 7.3.1.1

Cisco ≫ Secure Firewall Threat Defense Version 7.3.1.2

Cisco ≫ Secure Firewall Threat Defense Version 7.4.0

Cisco ≫ Secure Firewall Threat Defense Version 7.4.1

Cisco ≫ Secure Firewall Threat Defense Version 7.4.1.1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.4%	0.33

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	5.8	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-bypass-PTry37fX

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20407

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20407

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20407

EUVD