VDB
CVE-2022-20685
CVE-2022-20685
PUBLISHED
CVSS 7.5 HIGH
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
EPSS 0.50% · 66.5th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.50%
66.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | *, 3.17.0s, 3.17.1s |
| Cisco | Cisco UTD SNORT IPS Engine Software | 3.17.1S, *, * |
| cisco | firepower_threat_defense | 6.4.0.8, 6.2.3, 6.2.3.1 |
| Cisco | Cisco Cyber Vision | 3.1.1, 3.2.2, 3.0.0 |
| Cisco | Cisco Firepower Threat Defense Software | 6.2.3.14, 6.4.0.8, 6.4.0.4 |
| cisco | cyber_vision | 3.0.2, 3.1.1, 3.2.2 |
Exploit Intelligence
- CIRCL seen: CVE-2022-20685 (circl-sighting)
- cisco-sa-snort-dos-9D3hJLuj (circl)
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-xss-NXOxDhRQ</a></p><p><strong>Attention</strong>: Simplifying the Cisco portfolio includes the renaming of security products under one brand: Cisco Secure. For more information, see <a href="https://www.cisco.com/c/en/us/products/security/secure-names.html">Meet Cisco Secure (circl)
Timeline
- Jan 20, 2022 CVE Published
- Jan 21, 2022 CVE Updated
- Nov 15, 2024 PoC Published
- Nov 16, 2024 EPSS Score
- Dec 5, 2024 EPSS Score
- Dec 22, 2024 EPSS Score
- Jan 9, 2025 EPSS Score
- Jan 26, 2025 EPSS Score
- Feb 13, 2025 EPSS Score
- Mar 3, 2025 EPSS Score
- Mar 20, 2025 EPSS Score
- Apr 7, 2025 EPSS Score
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cli-cmdinj-4MttWZPB advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-dos-9D3hJLuj advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-confdcli-cmdinj-wybQDSSh advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rcm-vuls-7cS3Nuq advisory
- cisco-sa-snort-dos-9D3hJLuj url
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-xss-NXOxDhRQ</a></p><p><strong>Attention</strong>: Simplifying the Cisco portfolio includes the renaming of security products under one brand: Cisco Secure. For more information, see <a href="https://www.cisco.com/c/en/us/products/security/secure-names.html">Meet Cisco Secure url
- https://nvd.nist.gov/vuln/detail/CVE-2022-20685 advisory