CVE-2024-20363
Medium
Description
Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet handling. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.
SeverityMedium
CVSS5.8
Exploit probability—
Product
Cisco Snort
PublishedMay 22, 2024
First seenMay 22, 2024
Weakness typeCWE-290CWE-290
How to fix
Update
- cisco snort3.1.69.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco snort | 3.0.0-233 ≤ v < 3.1.69.0 | 3.1.69.0 |
| cisco secure_firewall_threat_defense | 7.4.0 | — |
| cisco unified_threat_defense_snort_intrusion_prevention_system_engine | 17.6.4, 17.6.5, 17.12.1a, 17.12.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.