5.8

CVE-2026-20006

EPSS 0.37%
Veröffentlicht 04.03.2026 17:37:54
Zuletzt bearbeitet 20.08.2026 16:45:55
Erkennungen
Login

Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service Vulnerability

A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a denial of service (DoS) condition.

This vulnerability is due to improper implementation of the TLS protocol. An attacker could exploit this vulnerability by sending a crafted TLS packet to an affected system. A successful exploit could allow the attacker to cause a device that is running Cisco Secure FTD Software to drop network traffic, resulting in a DoS condition. 
Note: TLS 1.3 is not affected by this vulnerability.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

NVD 33 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Secure Firewall Threat Defense Version 7.2.0

Cisco ≫ Secure Firewall Threat Defense Version 7.2.0.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.2

Cisco ≫ Secure Firewall Threat Defense Version 7.2.3

Cisco ≫ Secure Firewall Threat Defense Version 7.2.4

Cisco ≫ Secure Firewall Threat Defense Version 7.2.4.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.5

Cisco ≫ Secure Firewall Threat Defense Version 7.2.5.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.5.2

Cisco ≫ Secure Firewall Threat Defense Version 7.2.6

Cisco ≫ Secure Firewall Threat Defense Version 7.2.7

Cisco ≫ Secure Firewall Threat Defense Version 7.2.8

Cisco ≫ Secure Firewall Threat Defense Version 7.2.8.1

Cisco ≫ Secure Firewall Threat Defense Version 7.2.9

Cisco ≫ Secure Firewall Threat Defense Version 7.2.10

Cisco ≫ Secure Firewall Threat Defense Version 7.2.10.2

Cisco ≫ Secure Firewall Threat Defense Version 7.3.0

Cisco ≫ Secure Firewall Threat Defense Version 7.3.1

Cisco ≫ Secure Firewall Threat Defense Version 7.3.1.1

Cisco ≫ Secure Firewall Threat Defense Version 7.3.1.2

Cisco ≫ Secure Firewall Threat Defense Version 7.4.0

Cisco ≫ Secure Firewall Threat Defense Version 7.4.1

Cisco ≫ Secure Firewall Threat Defense Version 7.4.1.1

Cisco ≫ Secure Firewall Threat Defense Version 7.4.2

Cisco ≫ Secure Firewall Threat Defense Version 7.4.2.1

Cisco ≫ Secure Firewall Threat Defense Version 7.4.2.2

Cisco ≫ Secure Firewall Threat Defense Version 7.4.2.3

Cisco ≫ Secure Firewall Threat Defense Version 7.4.2.4

Cisco ≫ Secure Firewall Threat Defense Version 7.6.0

Cisco ≫ Secure Firewall Threat Defense Version 7.6.1

Cisco ≫ Secure Firewall Threat Defense Version 7.6.2

Cisco ≫ Secure Firewall Threat Defense Version 7.6.2.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.37%	0.289

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	5.8	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2026-20006

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20006

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20006

EUVD