5.8
CVE-2026-20058
- EPSS 0.39%
- Veröffentlicht 04.03.2026 17:47:14
- Zuletzt bearbeitet 20.08.2026 10:37:34
- CVE-Watchlists
- Unerledigt
LoginCisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability
Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Secure Firewall Threat Defense Version7.2.0
Cisco ≫ Secure Firewall Threat Defense Version7.2.0.1
Cisco ≫ Secure Firewall Threat Defense Version7.2.1
Cisco ≫ Secure Firewall Threat Defense Version7.2.2
Cisco ≫ Secure Firewall Threat Defense Version7.2.3
Cisco ≫ Secure Firewall Threat Defense Version7.2.4
Cisco ≫ Secure Firewall Threat Defense Version7.2.4.1
Cisco ≫ Secure Firewall Threat Defense Version7.2.5
Cisco ≫ Secure Firewall Threat Defense Version7.2.5.1
Cisco ≫ Secure Firewall Threat Defense Version7.2.5.2
Cisco ≫ Secure Firewall Threat Defense Version7.2.6
Cisco ≫ Secure Firewall Threat Defense Version7.2.7
Cisco ≫ Secure Firewall Threat Defense Version7.2.8
Cisco ≫ Secure Firewall Threat Defense Version7.2.8.1
Cisco ≫ Secure Firewall Threat Defense Version7.2.9
Cisco ≫ Secure Firewall Threat Defense Version7.2.10
Cisco ≫ Secure Firewall Threat Defense Version7.2.10.2
Cisco ≫ Secure Firewall Threat Defense Version7.3.0
Cisco ≫ Secure Firewall Threat Defense Version7.3.1
Cisco ≫ Secure Firewall Threat Defense Version7.3.1.1
Cisco ≫ Secure Firewall Threat Defense Version7.3.1.2
Cisco ≫ Secure Firewall Threat Defense Version7.4.0
Cisco ≫ Secure Firewall Threat Defense Version7.4.1
Cisco ≫ Secure Firewall Threat Defense Version7.4.1.1
Cisco ≫ Secure Firewall Threat Defense Version7.4.2
Cisco ≫ Secure Firewall Threat Defense Version7.4.2.1
Cisco ≫ Secure Firewall Threat Defense Version7.4.2.2
Cisco ≫ Secure Firewall Threat Defense Version7.4.2.3
Cisco ≫ Secure Firewall Threat Defense Version7.4.2.4
Cisco ≫ Secure Firewall Threat Defense Version7.4.3
Cisco ≫ Secure Firewall Threat Defense Version7.6.0
Cisco ≫ Secure Firewall Threat Defense Version7.6.1
Cisco ≫ Secure Firewall Threat Defense Version7.6.2
Cisco ≫ Secure Firewall Threat Defense Version7.6.2.1
Cisco ≫ Secure Firewall Threat Defense Version7.7.0
Cisco ≫ Secure Firewall Threat Defense Version7.7.10
Cisco ≫ Secure Firewall Threat Defense Version7.7.10.1
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.9.3a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.9.5a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.9.6
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.1a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.2
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.3
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.3a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.4
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.4a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.4b
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.5
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.5a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.5b
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.5c
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.5d
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.12.6
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.13.1a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.14.1a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.15.1a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.15.2a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.15.2c
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.15.3
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.15.3a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.15.4
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.15.4c
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.16.1a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.17.1
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.18.1
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.18.1a
Cisco ≫ Unified Threat Defense Snort Intrusion Prevention System Engine Version17.18.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.306 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Cisco PSIRT | 5.8 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
|
CWE-786 Access of Memory Location Before Start of Buffer
The product reads or writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed