BDU:2026-01756

Опубликовано: 07 янв. 2026

Источник: fstec

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Уязвимость механизма обнаружения Snort программного межсетевого экрана Cisco Secure Firewall Threat Defense (FTD) связана с раскрытием информации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к конфиденциальной информации

Вендор

Cisco Systems Inc.

Наименование ПО

Snort

Cisco Secure Firewall Threat Defense (FTD)

Версия ПО

3 (Snort)

7.0.0 (Cisco Secure Firewall Threat Defense (FTD))

7.0.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.1.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.2 (Cisco Secure Firewall Threat Defense (FTD))

7.0.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.3 (Cisco Secure Firewall Threat Defense (FTD))

7.0.4 (Cisco Secure Firewall Threat Defense (FTD))

7.0.5 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6.2 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6.3 (Cisco Secure Firewall Threat Defense (FTD))

7.0.7 (Cisco Secure Firewall Threat Defense (FTD))

7.0.8 (Cisco Secure Firewall Threat Defense (FTD))

7.0.8.1 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0.2 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0.3 (Cisco Secure Firewall Threat Defense (FTD))

7.2.0 (Cisco Secure Firewall Threat Defense (FTD))

7.2.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.2 (Cisco Secure Firewall Threat Defense (FTD))

7.2.3 (Cisco Secure Firewall Threat Defense (FTD))

7.2.4 (Cisco Secure Firewall Threat Defense (FTD))

7.2.4.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.5 (Cisco Secure Firewall Threat Defense (FTD))

7.2.5.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.6 (Cisco Secure Firewall Threat Defense (FTD))

7.2.7 (Cisco Secure Firewall Threat Defense (FTD))

7.2.5.2 (Cisco Secure Firewall Threat Defense (FTD))

7.2.8 (Cisco Secure Firewall Threat Defense (FTD))

7.2.8.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.9 (Cisco Secure Firewall Threat Defense (FTD))

7.2.10 (Cisco Secure Firewall Threat Defense (FTD))

7.2.10.2 (Cisco Secure Firewall Threat Defense (FTD))

7.3.0 (Cisco Secure Firewall Threat Defense (FTD))

7.3.1 (Cisco Secure Firewall Threat Defense (FTD))

7.3.1.1 (Cisco Secure Firewall Threat Defense (FTD))

7.3.1.2 (Cisco Secure Firewall Threat Defense (FTD))

7.4.0 (Cisco Secure Firewall Threat Defense (FTD))

7.4.1 (Cisco Secure Firewall Threat Defense (FTD))

7.4.1.1 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.2 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.3 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.4 (Cisco Secure Firewall Threat Defense (FTD))

7.4.3 (Cisco Secure Firewall Threat Defense (FTD))

7.6.0 (Cisco Secure Firewall Threat Defense (FTD))

7.6.1 (Cisco Secure Firewall Threat Defense (FTD))

7.6.2 (Cisco Secure Firewall Threat Defense (FTD))

7.6.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.7.0 (Cisco Secure Firewall Threat Defense (FTD))

7.7.10 (Cisco Secure Firewall Threat Defense (FTD))

7.7.10.1 (Cisco Secure Firewall Threat Defense (FTD))

Тип ПО

Программное средство защиты

Средство защиты

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Средний уровень опасности (базовая оценка CVSS 2.0 составляет 5)

Средний уровень опасности (базовая оценка CVSS 3.1 составляет 5,3)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 45%

0.00577

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Связанные уязвимости

CVE-2026-20027

CVSS3: 5.3

nvd

7 месяцев назад

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer out-of-bounds read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to obtain sensitive information in the Snort 3 data stream.

GHSA-8852-3pqj-jhpv

CVSS3: 5.3

github

7 месяцев назад

EPSS

Процентиль: 45%

0.00577

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2