Cisco
Cisco Snort: vulnerabilidades y CVE
Cisco Snort tiene 16 vulnerabilidades publicadas, 11 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE16
Últimos 12 meses11
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20290 | Media (5.8) | 0.19% | — | 16 sept 2026 | A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine… |
| CVE-2026-20068 | Media (5.8) | 0.41% | — | 4 mar 2026 | Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption… |
| CVE-2026-20067 | Media (5.8) | 0.45% | — | 4 mar 2026 | This vulnerability is due to incomplete error checking when parsing the Multicast DNS fields of the HTTP header. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established… |
| CVE-2026-20066 | Media (5.8) | 0.45% | — | 4 mar 2026 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption… |
| CVE-2026-20065 | Media (5.8) | 0.37% | — | 4 mar 2026 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption… |
| CVE-2026-20058 | Media (5.8) | 0.39% | — | 4 mar 2026 | Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to… |
| CVE-2026-20057 | Media (5.8) | 0.43% | — | 4 mar 2026 | — |
| CVE-2026-20054 | Media (5.8) | 0.43% | — | 4 mar 2026 | This vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A… |
| CVE-2026-20053 | Media (5.8) | 0.41% | — | 4 mar 2026 | Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to… |
| CVE-2026-20005 | Media (5.8) | 0.49% | — | 4 mar 2026 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption… |
| CVE-2025-20359 | Crítica (9.1) | 0.48% | — | 15 oct 2025 | Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the disclosure of possible sensitive data or cause the Snort 3 Detection… |
| CVE-2021-1285 | Alta (7.4) | 2.9% | — | 18 nov 2024 | Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)… |
| CVE-2021-1494 | Media (5.8) | 1.1% | — | 15 nov 2024 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to… |
| CVE-2024-20342 | Alta (8.6) | 0.49% | — | 23 oct 2024 | This vulnerability is due to an incorrect connection count comparison. An attacker could exploit this vulnerability by sending traffic through an affected device at a rate that exceeds a configured rate filter. A… |
| CVE-2024-20363 | Media (5.8) | 0.37% | — | 22 may 2024 | Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected… |
| CVE-2021-40116 | Alta (7.5) | 1.4% | — | 27 oct 2021 | Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to… |