5.8

CVE-2026-20005

EPSS 0.49%
Veröffentlicht 04.03.2026 17:16:18
Zuletzt bearbeitet 01.09.2026 19:39:42
Erkennungen
Login

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.

 This vulnerability is due to incomplete parsing of the SSL handshake ingress packets. An attacker could exploit this vulnerability by sending crafted SSL handshake packets. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine restarts unexpectedly.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 90 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Cyber Vision Version 3.0.0

Cisco ≫ Cyber Vision Version 3.0.1

Cisco ≫ Cyber Vision Version 3.0.2

Cisco ≫ Cyber Vision Version 3.0.3

Cisco ≫ Cyber Vision Version 3.0.4

Cisco ≫ Cyber Vision Version 3.0.5

Cisco ≫ Cyber Vision Version 3.0.6

Cisco ≫ Cyber Vision Version 3.1.0

Cisco ≫ Cyber Vision Version 3.1.1

Cisco ≫ Cyber Vision Version 3.1.2

Cisco ≫ Cyber Vision Version 3.2.0

Cisco ≫ Cyber Vision Version 3.2.1

Cisco ≫ Cyber Vision Version 3.2.2

Cisco ≫ Cyber Vision Version 3.2.3

Cisco ≫ Cyber Vision Version 3.2.4

Cisco ≫ Cyber Vision Version 4.0.0

Cisco ≫ Cyber Vision Version 4.0.1

Cisco ≫ Cyber Vision Version 4.0.2

Cisco ≫ Cyber Vision Version 4.0.3

Cisco ≫ Cyber Vision Version 4.1.0

Cisco ≫ Cyber Vision Version 4.1.1

Cisco ≫ Cyber Vision Version 4.1.2

Cisco ≫ Cyber Vision Version 4.1.3

Cisco ≫ Cyber Vision Version 4.1.4

Cisco ≫ Cyber Vision Version 4.1.5

Cisco ≫ Cyber Vision Version 4.1.6

Cisco ≫ Cyber Vision Version 4.1.7

Cisco ≫ Cyber Vision Version 4.2.0

Cisco ≫ Cyber Vision Version 4.2.1

Cisco ≫ Cyber Vision Version 4.2.2

Cisco ≫ Cyber Vision Version 4.2.3

Cisco ≫ Cyber Vision Version 4.2.4

Cisco ≫ Cyber Vision Version 4.2.6

Cisco ≫ Cyber Vision Version 4.3.0

Cisco ≫ Cyber Vision Version 4.3.1

Cisco ≫ Cyber Vision Version 4.3.2

Cisco ≫ Cyber Vision Version 4.3.3

Cisco ≫ Cyber Vision Version 4.4.0

Cisco ≫ Cyber Vision Version 4.4.1

Cisco ≫ Cyber Vision Version 4.4.2

Cisco ≫ Cyber Vision Version 4.4.3

Cisco ≫ Cyber Vision Version 5.0.0

Cisco ≫ Cyber Vision Version 5.0.1

Cisco ≫ Cyber Vision Version 5.0.2

Cisco ≫ Cyber Vision Version 5.1.0

Cisco ≫ Cyber Vision Version 5.1.1

Cisco ≫ Cyber Vision Version 5.1.2

Cisco ≫ Cyber Vision Version 5.1.3

Cisco ≫ Cyber Vision Version 5.2.0

Cisco ≫ Cyber Vision Version 5.2.1

Cisco ≫ Cyber Vision Version 5.3.0

Cisco ≫ Cyber Vision Version 5.3.1

Cisco ≫ Cyber Vision Version 5.3.2

Cisco ≫ Secure Firewall Threat Defense Version 7.6.0

Cisco ≫ Secure Firewall Threat Defense Version 7.6.1

Cisco ≫ Secure Firewall Threat Defense Version 7.6.2

Cisco ≫ Secure Firewall Threat Defense Version 7.6.2.1

Cisco ≫ Secure Firewall Threat Defense Version 7.7.0

Cisco ≫ Secure Firewall Threat Defense Version 7.7.10

Cisco ≫ Secure Firewall Threat Defense Version 7.7.10.1

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.9.4

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.9.5e

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.1a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.2

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.3

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.3a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.4

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.4a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.4b

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.5

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.5a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.5b

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.5c

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.5d

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.12.6

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.13.1a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.14.1a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.15.1a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.15.2a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.15.2c

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.15.3

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.15.3a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.15.4

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.15.4c

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.16.1a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.17.1

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.18.1

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.18.1a

Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version 17.18.2

Cisco ≫ Snort Version >= 3.0.0-233 < 3.9.2.0

   Cisco ≫ Meraki Mx100 Version -
   Cisco ≫ Meraki Mx105 Version -
   Cisco ≫ Meraki Mx250 Version -
   Cisco ≫ Meraki Mx400 Version -
   Cisco ≫ Meraki Mx450 Version -
   Cisco ≫ Meraki Mx600 Version -
   Cisco ≫ Meraki Mx64 Version -
   Cisco ≫ Meraki Mx64w Version -
   Cisco ≫ Meraki Mx65 Version -
   Cisco ≫ Meraki Mx65w Version -
   Cisco ≫ Meraki Mx67 Version -
   Cisco ≫ Meraki Mx67c Version -
   Cisco ≫ Meraki Mx67w Version -
   Cisco ≫ Meraki Mx68 Version -
   Cisco ≫ Meraki Mx68cw Version -
   Cisco ≫ Meraki Mx75 Version -
   Cisco ≫ Meraki Mx84 Version -
   Cisco ≫ Meraki Mx85 Version -
   Cisco ≫ Meraki Mx95 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.49%	0.382

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	5.8	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-392 Missing Report of Error Condition

The product encounters an error but does not provide a status code or return value to indicate that an error has occurred.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-20005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20005

EUVD