VDB
BDU%3A2024-08896
BDU%3A2024-08896
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Уязвимость функции TCP Intercept и системы обнаружения вторжений Snort микропрограммного обеспечения межсетевых экранов Cisco Firepower Threat Defense (FTD), позволяющая нарушителю обойти ограничения безопасности и выполнить атаку SYN flood
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | firepower_threat_defense_software | 6.4.0, 6.6.0, 6.7.0 |
| Cisco Systems Inc. | Firepower Threat Defense | |
| Cisco | Cisco Firepower Threat Defense Software | 6.2.3.10, 6.2.3.11, 6.2.3.9 |
Timeline
- Oct 23, 2024 CVE Published
- Oct 23, 2024 PoC Published
- Nov 1, 2024 CVE Updated
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-bypass-PTry37fX url
- https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/threat_defense_service_policies.html url
- https://www.cisco.com/c/en/us/td/docs/security/firepower/70/snort3/config-guide/snort3-configuration-guide-v70/migrating.html url