Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hj38-j9jq-rjpp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.

EPSS

Процентиль: 83%
0.02191
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-670

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 6 лет назад

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.

CVSS3: 5.3
nvd
почти 6 лет назад

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.

CVSS3: 5.3
debian
почти 6 лет назад

Multiple Cisco products are affected by a vulnerability in the Snort a ...

CVSS3: 4
fstec
почти 6 лет назад

Уязвимость механизма обнаружения приложений системы обнаружения вторжений Snort, позволяющая нарушителю повысить свои привилегии

CVSS3: 7.5
altlinux
больше 5 лет назад

ALT-PU-2021-1678: package `snort` update to version 2.9.17.1-alt1

EPSS

Процентиль: 83%
0.02191
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-670