Riskcovery

CVE-2026-20005

State
Published
Severity
5.8 Medium
Published
Mar 4, 2026
Updated
Mar 4, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete parsing of the SSL handshake ingress packets. An attacker could exploit this vulnerability by sending crafted SSL handshake packets. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine restarts unexpectedly.

Scores

CVSSScoreVectorSource
3.15.8 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lcisco

Weaknesses

  • CWE-392 Missing Report of Error Condition

Affected Products

ProductVersions
Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco
  • 7.6.0Affected
  • 7.6.1Affected
  • 7.6.2Affected
  • 7.6.2.1Affected
  • 7.7.0Affected
  • 7.7.10Affected
  • 7.7.10.1Affected
Cisco Cyber VisionCisco
  • 3.0.4Affected
  • 3.0.0Affected
  • 3.0.1Affected
  • 3.0.2Affected
  • 3.0.3Affected
  • 3.0.5Affected
  • 3.0.6Affected
  • 3.1.0Affected
  • 3.1.2Affected
  • 3.1.1Affected
  • 3.2.3Affected
  • 3.2.1Affected
  • 3.2.4Affected
  • 3.2.0Affected
  • 3.2.2Affected
  • 4.0.0Affected
  • 4.0.1Affected
  • 4.0.2Affected
  • 4.0.3Affected
  • 4.1.0Affected
  • 4.1.1Affected
  • 4.1.2Affected
  • 4.1.3Affected
  • 4.1.4Affected
  • 4.1.5Affected
  • and 27 more versions
Cisco UTD SNORT IPS Engine SoftwareCisco
  • 17.2.1rAffected
  • 17.3.1aAffected
  • 17.3.2Affected
  • 17.3.3Affected
  • 17.3.4aAffected
  • 17.3.6Affected
  • 17.3.5Affected
  • 17.3.7Affected
  • 17.3.8Affected
  • 17.4.1aAffected
  • 17.4.2Affected
  • 17.4.1bAffected
  • 17.5.1aAffected
  • 17.6.1aAffected
  • 17.6.2Affected
  • 17.6.3aAffected
  • 17.6.4Affected
  • 17.6.5Affected
  • 17.6.6Affected
  • 17.6.7Affected
  • 17.6.8aAffected
  • 17.7.1aAffected
  • 17.7.2Affected
  • 17.10.1aAffected
  • 17.9.1aAffected
  • and 37 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.