CVE-2026-20057

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20057", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.356Z", "datePublished": "2026-03-04T17:47:07.960Z", "dateUpdated": "2026-03-04T21:32:46.370Z"}, "containers": {"cna": {"title": "Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "baseScore": 5.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}}], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. \r\n \r\nThis vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed", "name": "cisco-sa-ftd-snort3-vbavuls-96UcVVed"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ftd-snort3-vbavuls-96UcVVed", "discovery": "INTERNAL", "defects": ["CSCwq23377"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Divide By Zero", "type": "cwe", "cweId": "CWE-369"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Cyber Vision", "versions": [{"version": "3.0.0", "status": "affected"}, {"version": "3.0.2", "status": "affected"}, {"version": "3.0.3", "status": "affected"}, {"version": "3.0.1", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "3.0.4", "status": "affected"}, {"version": "3.1.1", "status": "affected"}, {"version": "3.1.2", "status": "affected"}, {"version": "3.2.0", "status": "affected"}, {"version": "3.0.5", "status": "affected"}, {"version": "3.2.1", "status": "affected"}, {"version": "3.0.6", "status": "affected"}, {"version": "3.2.2", "status": "affected"}, {"version": "3.2.3", "status": "affected"}, {"version": "3.2.4", "status": "affected"}, {"version": "4.0.0", "status": "affected"}, {"version": "4.0.1", "status": "affected"}, {"version": "4.0.2", "status": "affected"}, {"version": "4.0.3", "status": "affected"}, {"version": "4.1.0", "status": "affected"}, {"version": "4.1.1", "status": "affected"}, {"version": "4.1.2", "status": "affected"}, {"version": "4.1.3", "status": "affected"}, {"version": "4.1.4", "status": "affected"}, {"version": "4.2.0", "status": "affected"}, {"version": "4.2.1", "status": "affected"}, {"version": "4.1.5", "status": "affected"}, {"version": "4.2.2", "status": "affected"}, {"version": "4.2.X", "status": "affected"}, {"version": "4.2.3", "status": "affected"}, {"version": "4.2.4", "status": "affected"}, {"version": "4.2.6", "status": "affected"}, {"version": "4.1.6", "status": "affected"}, {"version": "4.3.0", "status": "affected"}, {"version": "4.3.1", "status": "affected"}, {"version": "4.3.2", "status": "affected"}, {"version": "4.3.3", "status": "affected"}, {"version": "4.4.0", "status": "affected"}, {"version": "4.4.1", "status": "affected"}, {"version": "4.4.2", "status": "affected"}, {"version": "4.4.3", "status": "affected"}, {"version": "4.1.7", "status": "affected"}, {"version": "5.0.0", "status": "affected"}, {"version": "5.0.1", "status": "affected"}, {"version": "5.0.2", "status": "affected"}, {"version": "5.1.0", "status": "affected"}, {"version": "5.1.1", "status": "affected"}, {"version": "5.1.2", "status": "affected"}, {"version": "5.1.3", "status": "affected"}, {"version": "5.2.0", "status": "affected"}, {"version": "5.2.1", "status": "affected"}, {"version": "5.3.0", "status": "affected"}, {"version": "5.3.1", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"version": "7.2.0", "status": "affected"}, {"version": "7.2.0.1", "status": "affected"}, {"version": "7.2.1", "status": "affected"}, {"version": "7.3.0", "status": "affected"}, {"version": "7.2.2", "status": "affected"}, {"version": "7.2.3", "status": "affected"}, {"version": "7.3.1", "status": "affected"}, {"version": "7.2.4", "status": "affected"}, {"version": "7.2.5", "status": "affected"}, {"version": "7.2.4.1", "status": "affected"}, {"version": "7.3.1.1", "status": "affected"}, {"version": "7.4.0", "status": "affected"}, {"version": "7.2.5.1", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.2.6", "status": "affected"}, {"version": "7.4.1.1", "status": "affected"}, {"version": "7.2.7", "status": "affected"}, {"version": "7.2.5.2", "status": "affected"}, {"version": "7.3.1.2", "status": "affected"}, {"version": "7.2.8", "status": "affected"}, {"version": "7.6.0", "status": "affected"}, {"version": "7.4.2", "status": "affected"}, {"version": "7.2.8.1", "status": "affected"}, {"version": "7.4.2.1", "status": "affected"}, {"version": "7.2.9", "status": "affected"}, {"version": "7.7.0", "status": "affected"}, {"version": "7.4.2.2", "status": "affected"}, {"version": "7.2.10", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.4.2.3", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.7.10", "status": "affected"}, {"version": "7.6.2.1", "status": "affected"}, {"version": "7.7.10.1", "status": "affected"}, {"version": "7.4.2.4", "status": "affected"}, {"version": "7.2.10.2", "status": "affected"}, {"version": "7.4.3", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco UTD SNORT IPS Engine Software", "versions": [{"version": "17.12.1a", "status": "affected"}, {"version": "17.12.2", "status": "affected"}, {"version": "17.13.1a", "status": "affected"}, {"version": "17.12.3", "status": "affected"}, {"version": "17.14.1a", "status": "affected"}, {"version": "17.12.4", "status": "affected"}, {"version": "17.12.3a", "status": "affected"}, {"version": "17.15.1a", "status": "affected"}, {"version": "17.16.1a", "status": "affected"}, {"version": "17.12.4a", "status": "affected"}, {"version": "17.15.2c", "status": "affected"}, {"version": "17.12.4b", "status": "affected"}, {"version": "17.15.2a", "status": "affected"}, {"version": "17.12.5", "status": "affected"}, {"version": "17.17.1", "status": "affected"}, {"version": "17.12.5a", "status": "affected"}, {"version": "17.15.3a", "status": "affected"}, {"version": "17.15.3", "status": "affected"}, {"version": "17.12.5b", "status": "affected"}, {"version": "17.12.5c", "status": "affected"}, {"version": "17.15.4", "status": "affected"}, {"version": "17.18.1", "status": "affected"}, {"version": "17.18.1a", "status": "affected"}, {"version": "17.12.6", "status": "affected"}, {"version": "17.15.4c", "status": "affected"}, {"version": "17.12.5d", "status": "affected"}, {"version": "17.18.2", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-04T17:47:07.960Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-04T21:32:36.004303Z", "id": "CVE-2026-20057", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-04T21:32:46.370Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20057", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-04T21:32:36.004303Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-04T21:32:41.238Z"}}], "cna": {"title": "Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability", "source": {"defects": ["CSCwq23377"], "advisory": "cisco-sa-ftd-snort3-vbavuls-96UcVVed", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Cyber Vision", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.2"}, {"status": "affected", "version": "3.0.3"}, {"status": "affected", "version": "3.0.1"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.4"}, {"status": "affected", "version": "3.1.1"}, {"status": "affected", "version": "3.1.2"}, {"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.0.5"}, {"status": "affected", "version": "3.2.1"}, {"status": "affected", "version": "3.0.6"}, {"status": "affected", "version": "3.2.2"}, {"status": "affected", "version": "3.2.3"}, {"status": "affected", "version": "3.2.4"}, {"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "4.0.1"}, {"status": "affected", "version": "4.0.2"}, {"status": "affected", "version": "4.0.3"}, {"status": "affected", "version": "4.1.0"}, {"status": "affected", "version": "4.1.1"}, {"status": "affected", "version": "4.1.2"}, {"status": "affected", "version": "4.1.3"}, {"status": "affected", "version": "4.1.4"}, {"status": "affected", "version": "4.2.0"}, {"status": "affected", "version": "4.2.1"}, {"status": "affected", "version": "4.1.5"}, {"status": "affected", "version": "4.2.2"}, {"status": "affected", "version": "4.2.X"}, {"status": "affected", "version": "4.2.3"}, {"status": "affected", "version": "4.2.4"}, {"status": "affected", "version": "4.2.6"}, {"status": "affected", "version": "4.1.6"}, {"status": "affected", "version": "4.3.0"}, {"status": "affected", "version": "4.3.1"}, {"status": "affected", "version": "4.3.2"}, {"status": "affected", "version": "4.3.3"}, {"status": "affected", "version": "4.4.0"}, {"status": "affected", "version": "4.4.1"}, {"status": "affected", "version": "4.4.2"}, {"status": "affected", "version": "4.4.3"}, {"status": "affected", "version": "4.1.7"}, {"status": "affected", "version": "5.0.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.1.0"}, {"status": "affected", "version": "5.1.1"}, {"status": "affected", "version": "5.1.2"}, {"status": "affected", "version": "5.1.3"}, {"status": "affected", "version": "5.2.0"}, {"status": "affected", "version": "5.2.1"}, {"status": "affected", "version": "5.3.0"}, {"status": "affected", "version": "5.3.1"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.2.0.1"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.3.0"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "7.2.3"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.2.4"}, {"status": "affected", "version": "7.2.5"}, {"status": "affected", "version": "7.2.4.1"}, {"status": "affected", "version": "7.3.1.1"}, {"status": "affected", "version": "7.4.0"}, {"status": "affected", "version": "7.2.5.1"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.2.6"}, {"status": "affected", "version": "7.4.1.1"}, {"status": "affected", "version": "7.2.7"}, {"status": "affected", "version": "7.2.5.2"}, {"status": "affected", "version": "7.3.1.2"}, {"status": "affected", "version": "7.2.8"}, {"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "7.2.8.1"}, {"status": "affected", "version": "7.4.2.1"}, {"status": "affected", "version": "7.2.9"}, {"status": "affected", "version": "7.7.0"}, {"status": "affected", "version": "7.4.2.2"}, {"status": "affected", "version": "7.2.10"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.4.2.3"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.10"}, {"status": "affected", "version": "7.6.2.1"}, {"status": "affected", "version": "7.7.10.1"}, {"status": "affected", "version": "7.4.2.4"}, {"status": "affected", "version": "7.2.10.2"}, {"status": "affected", "version": "7.4.3"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco UTD SNORT IPS Engine Software", "versions": [{"status": "affected", "version": "17.12.1a"}, {"status": "affected", "version": "17.12.2"}, {"status": "affected", "version": "17.13.1a"}, {"status": "affected", "version": "17.12.3"}, {"status": "affected", "version": "17.14.1a"}, {"status": "affected", "version": "17.12.4"}, {"status": "affected", "version": "17.12.3a"}, {"status": "affected", "version": "17.15.1a"}, {"status": "affected", "version": "17.16.1a"}, {"status": "affected", "version": "17.12.4a"}, {"status": "affected", "version": "17.15.2c"}, {"status": "affected", "version": "17.12.4b"}, {"status": "affected", "version": "17.15.2a"}, {"status": "affected", "version": "17.12.5"}, {"status": "affected", "version": "17.17.1"}, {"status": "affected", "version": "17.12.5a"}, {"status": "affected", "version": "17.15.3a"}, {"status": "affected", "version": "17.15.3"}, {"status": "affected", "version": "17.12.5b"}, {"status": "affected", "version": "17.12.5c"}, {"status": "affected", "version": "17.15.4"}, {"status": "affected", "version": "17.18.1"}, {"status": "affected", "version": "17.18.1a"}, {"status": "affected", "version": "17.12.6"}, {"status": "affected", "version": "17.15.4c"}, {"status": "affected", "version": "17.12.5d"}, {"status": "affected", "version": "17.18.2"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed", "name": "cisco-sa-ftd-snort3-vbavuls-96UcVVed"}], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. \r\n \r\nThis vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-369", "description": "Divide By Zero"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-04T17:47:07.960Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20057", "state": "PUBLISHED", "dateUpdated": "2026-03-04T21:32:46.370Z", "dateReserved": "2025-10-08T11:59:15.356Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-03-04T17:47:07.960Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Cyber Vision", "vendor": "Cisco", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.2"}, {"status": "affected", "version": "3.0.3"}, {"status": "affected", "version": "3.0.1"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.4"}, {"status": "affected", "version": "3.1.1"}, {"status": "affected", "version": "3.1.2"}, {"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.0.5"}, {"status": "affected", "version": "3.2.1"}, {"status": "affected", "version": "3.0.6"}, {"status": "affected", "version": "3.2.2"}, {"status": "affected", "version": "3.2.3"}, {"status": "affected", "version": "3.2.4"}, {"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "4.0.1"}, {"status": "affected", "version": "4.0.2"}, {"status": "affected", "version": "4.0.3"}, {"status": "affected", "version": "4.1.0"}, {"status": "affected", "version": "4.1.1"}, {"status": "affected", "version": "4.1.2"}, {"status": "affected", "version": "4.1.3"}, {"status": "affected", "version": "4.1.4"}, {"status": "affected", "version": "4.2.0"}, {"status": "affected", "version": "4.2.1"}, {"status": "affected", "version": "4.1.5"}, {"status": "affected", "version": "4.2.2"}, {"status": "affected", "version": "4.2.X"}, {"status": "affected", "version": "4.2.3"}, {"status": "affected", "version": "4.2.4"}, {"status": "affected", "version": "4.2.6"}, {"status": "affected", "version": "4.1.6"}, {"status": "affected", "version": "4.3.0"}, {"status": "affected", "version": "4.3.1"}, {"status": "affected", "version": "4.3.2"}, {"status": "affected", "version": "4.3.3"}, {"status": "affected", "version": "4.4.0"}, {"status": "affected", "version": "4.4.1"}, {"status": "affected", "version": "4.4.2"}, {"status": "affected", "version": "4.4.3"}, {"status": "affected", "version": "4.1.7"}, {"status": "affected", "version": "5.0.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.1.0"}, {"status": "affected", "version": "5.1.1"}, {"status": "affected", "version": "5.1.2"}, {"status": "affected", "version": "5.1.3"}, {"status": "affected", "version": "5.2.0"}, {"status": "affected", "version": "5.2.1"}, {"status": "affected", "version": "5.3.0"}, {"status": "affected", "version": "5.3.1"}]}, {"defaultStatus": "unknown", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.2.0.1"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.3.0"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "7.2.3"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.2.4"}, {"status": "affected", "version": "7.2.5"}, {"status": "affected", "version": "7.2.4.1"}, {"status": "affected", "version": "7.3.1.1"}, {"status": "affected", "version": "7.4.0"}, {"status": "affected", "version": "7.2.5.1"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.2.6"}, {"status": "affected", "version": "7.4.1.1"}, {"status": "affected", "version": "7.2.7"}, {"status": "affected", "version": "7.2.5.2"}, {"status": "affected", "version": "7.3.1.2"}, {"status": "affected", "version": "7.2.8"}, {"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "7.2.8.1"}, {"status": "affected", "version": "7.4.2.1"}, {"status": "affected", "version": "7.2.9"}, {"status": "affected", "version": "7.7.0"}, {"status": "affected", "version": "7.4.2.2"}, {"status": "affected", "version": "7.2.10"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.4.2.3"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.10"}, {"status": "affected", "version": "7.6.2.1"}, {"status": "affected", "version": "7.7.10.1"}, {"status": "affected", "version": "7.4.2.4"}, {"status": "affected", "version": "7.2.10.2"}, {"status": "affected", "version": "7.4.3"}]}, {"defaultStatus": "unknown", "product": "Cisco UTD SNORT IPS Engine Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "17.12.1a"}, {"status": "affected", "version": "17.12.2"}, {"status": "affected", "version": "17.13.1a"}, {"status": "affected", "version": "17.12.3"}, {"status": "affected", "version": "17.14.1a"}, {"status": "affected", "version": "17.12.4"}, {"status": "affected", "version": "17.12.3a"}, {"status": "affected", "version": "17.15.1a"}, {"status": "affected", "version": "17.16.1a"}, {"status": "affected", "version": "17.12.4a"}, {"status": "affected", "version": "17.15.2c"}, {"status": "affected", "version": "17.12.4b"}, {"status": "affected", "version": "17.15.2a"}, {"status": "affected", "version": "17.12.5"}, {"status": "affected", "version": "17.17.1"}, {"status": "affected", "version": "17.12.5a"}, {"status": "affected", "version": "17.15.3a"}, {"status": "affected", "version": "17.15.3"}, {"status": "affected", "version": "17.12.5b"}, {"status": "affected", "version": "17.12.5c"}, {"status": "affected", "version": "17.15.4"}, {"status": "affected", "version": "17.18.1"}, {"status": "affected", "version": "17.18.1a"}, {"status": "affected", "version": "17.12.6"}, {"status": "affected", "version": "17.15.4c"}, {"status": "affected", "version": "17.12.5d"}, {"status": "affected", "version": "17.18.2"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*", "matchCriteriaId": "1FCDD0AB-B7FD-4D7B-8747-08156F987255", "versionEndExcluding": "3.9.3.0", "versionStartIncluding": "3.0.0-233", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "3297323C-B263-45EA-90CE-2B8415C9E498", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "797AD8A4-083B-4A9E-A49D-65EE828E1637", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "4EB16212-A9DC-4C8C-B220-9619C65436EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "9C64043F-1F0D-47F7-AEEE-309B239891DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "7605B088-A708-40D3-806B-D7E460AE53DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "E1F7F871-C211-4DC6-8020-1075405BAE17", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "30E42800-B7C9-4006-8B7A-5A9A5F5EB234", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "EE33F541-232E-4432-AB41-EC0500A85E6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "8D5B5FDC-79B2-447E-816F-1F630508A889", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B806EAC6-E1B2-40FB-9B2F-6AFB4A16AF89", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "D7BAC55C-C114-4E64-BC9E-9000B8C016CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "925E6B9B-F7F1-4ED8-8431-282A1061B527", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "A10EDC3E-0EF6-47DD-834D-51C5BBCC13EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "BB5F799E-6696-4391-9B58-06715FA4086A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "EE31D26B-CD47-4853-B1C3-2E50B0882AFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "2758714C-4E9A-4442-9AD1-82D8E43995C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "0F63C0E4-99A9-4D4F-BCF9-EF5F5455C04C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "13EA024C-97A4-4D33-BC3E-51DB77C51E76", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "4A2224A9-96D6-4621-B3AD-D5E1C6884937", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "D2B27A1F-E66D-4ADE-83B2-6D2457F49CC4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "50511288-D7A4-4EAE-8238-1E899EF16A9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "9115DF7D-68AD-4895-8F66-5AEA0170C9E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "664B4FF8-D812-4FAF-908E-0CD03EFBA995", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "7951F3D5-D2CC-4655-9A0E-E47FD73031D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "61C467AA-7B57-4135-9E72-F161311633F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "016177C9-7AE6-496C-9D7A-54408F2DE743", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "D38383C7-2DEB-4E98-B26E-CD5315640B10", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "93445A6B-48A4-4CF3-946C-A8EE2086F0FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "9ACF81ED-42D2-4279-9E6B-623D1D9175ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "06668223-D683-4924-9640-79BDB75CB4CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "AEE4C398-9696-40CF-8274-80EC7B394BD4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "0D7D2281-5947-41B0-84E8-B24EF5A9D843", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "C74F60CB-C5FE-4519-87DF-8C3EF0CC2F9A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "4BECE10A-1391-42C2-BF3D-D24C22093EDF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "93ED93DC-AA9C-40B5-8D67-727A7E222A98", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "82CD7BC5-4112-4A86-9CE3-F880CB1711EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "4969C7E5-045E-4627-B5A3-C11C2CEB0427", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "EF58C035-28E4-42C6-9D63-ABDCC3C90505", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "9507C011-EC7A-43D6-A3AB-573DADB9AEA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "EF70B046-C68A-410D-B18A-A0CA6FA2FC53", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "6D76A8B8-17A7-4739-9EF6-A0ED3DFC7EEE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "C848BB19-00F6-4B8B-9B99-6350A7A8489C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "5AA87A5B-BAB9-44B6-8C87-8E6C6A404EBC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "4A93D27E-65A3-4968-A178-1F0DFDC164AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "59119742-BF8B-4793-937E-AAD187784CBC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "DB50A62C-0500-48AC-B94F-1D9736439686", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "5020C7E8-BB50-4726-9C70-8B2468A43471", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "BABF1887-DB58-424D-BC80-0FB73C6E8E97", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "D19917B2-462C-414F-B796-90D3EFB49DB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "6082C16F-6A4C-438F-98C9-774E2F621F2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "DFB4DC3B-611B-42C1-94BB-B503CBC28056", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:cyber_vision:5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "91EEA7DF-5B8C-4309-A34E-99B3D392CE82", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "237462A2-E0CF-4201-9115-D94910F9745B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "2CA2F5B0-0106-4FF2-91BD-AEF3F064F69E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "EF9FFE56-9A00-456E-B097-114F714133BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "0E253A08-B4D4-4E81-9D5A-C15D198C43AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "59C7F868-1571-44CC-90E1-7A5EA01E63FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "7432B6F9-03CD-4373-B281-2A09864E7828", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "3D42B7E6-71ED-48BA-B11F-6791FE96C1B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "39CC3AC6-6F75-43BF-BBC9-F74AADB74716", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "FFBAC033-FF89-4581-92F6-EA4FFEE40F54", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "5AF3CB27-8315-452F-80E1-5DAF883319B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "7A910367-E5D5-4817-9DAA-3225D4FA8055", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "38EC17C6-2DA5-4E26-987A-FD14F539F55B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "25E3D7DE-90EB-4531-BD7D-738637A83CD4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "4E7FE2B9-65C0-4F7F-8810-72BFE861C521", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "839E56CB-B466-4A38-A6E0-EBF27AA46315", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10:*:*:*:*:*:*:*", "matchCriteriaId": "A90CFCD8-F873-4BEB-8193-97B62DB7FDA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "677E2330-7FB5-4D91-9543-4941A8BE6A38", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "DD33999C-8DE7-4C0C-A8E5-1BA7127E36FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "A977F379-2F93-4A56-B0A6-C45AEF274123", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "DA7FA3B6-D630-42E3-B69F-B20D38B33531", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "9B125CC4-0DAE-4C26-9A27-2532BB09EA8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "5BC88149-095A-41DE-AA27-1CFD21125EF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "BA983223-35AE-4D2F-B2F5-BA0614908C3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "17A31A33-2E84-4C79-86BD-1E9FF4C1DD09", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "B58DC884-9430-49D4-AA8B-7FEB7505B7A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5EC075D4-0033-46ED-9E55-576997424382", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "EA94FBB2-E095-48A3-BA39-5C2EC01D0ACA", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "D61D406F-6796-4E90-A954-285F6A3785AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "24DA7AE5-6288-4901-B9C9-36DF3788AA9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "55A60A76-D206-43B2-B6B1-94757FB3E258", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "E91D9CAD-174A-4AAE-AB14-BD3110F9CFA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "8EC515FD-4D9A-428D-9E72-9014C613A0E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "5B53EBBB-8E55-4D94-ADD3-C93630E09241", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "D9033AA9-2481-406A-8FBD-C671D3888D98", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "2F843EFD-0130-45F0-A212-9921879F3CBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10:*:*:*:*:*:*:*", "matchCriteriaId": "47EFC734-E450-4606-939A-86BE0F7FC5E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "814577AF-98E9-49A8-8F1C-BF938D4F1F29", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*", "matchCriteriaId": "8FC4D3D8-4391-4ED6-B27B-EF47C96904CD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*", "matchCriteriaId": "60AE1B18-3CEB-45B3-A43D-3C6DCC1F20F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*", "matchCriteriaId": "9F4AA555-A8AD-4EF1-BDED-CCB550AA7560", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*", "matchCriteriaId": "158ADFDB-D308-40AA-A445-BB9AF2F2414B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*", "matchCriteriaId": "5F44916C-A0B3-40B1-B9E5-ACED3A0ECC80", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*", "matchCriteriaId": "A685AE11-0D19-4F98-B1A1-F40C66407A20", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*", "matchCriteriaId": "8E0C23C5-4248-485F-8132-8459933EBDE5", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*", "matchCriteriaId": "410D8A3B-CCD3-4BBC-BF03-63717B397E33", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*", "matchCriteriaId": "57D161E1-A275-44B1-AAC5-7A5207243A8B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*", "matchCriteriaId": "AB1C329A-CFA4-432C-926C-AD4EE14D30BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*", "matchCriteriaId": "BAA951FD-37B6-4D5B-BC88-5FD6E1A670EF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*", "matchCriteriaId": "CD3F8898-782F-49DA-8FB4-625BCB08C267", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*", "matchCriteriaId": "3D17AF21-1F77-425F-9DC0-42E4F82309C7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*", "matchCriteriaId": "AA3E7D96-E406-4CB5-91FC-A0FD5D94A876", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*", "matchCriteriaId": "07AAFFE0-B85D-4A62-894B-20A05973CC5D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*", "matchCriteriaId": "7842C05A-F9DE-49A7-8478-A1EF324C593D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*", "matchCriteriaId": "9A6C2814-0DAC-40AF-9494-3EEA9429F603", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*", "matchCriteriaId": "25A353E7-5F9E-4A94-BDA9-598C54572FEF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*", "matchCriteriaId": "70B8BACE-F390-402E-B80B-F57F473B1415", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*", "matchCriteriaId": "7E984118-99E5-45BC-B238-E950E62E1A77", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*", "matchCriteriaId": "3825888B-D34F-466F-9E91-CBDE7A07B43C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*", "matchCriteriaId": "2E88110E-78DE-4799-8F22-37E8B010DF81", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*", "matchCriteriaId": "D1D5E95D-1CE2-472B-A4C6-E098B01BA3FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*", "matchCriteriaId": "6D8E05E5-1957-44D0-BD34-45A9AB4782B8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*", "matchCriteriaId": "7AB3A273-B0E6-4659-91C4-77F0192EE1DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*", "matchCriteriaId": "2FFB4BE9-4CC8-49F2-851C-F4EA098BA3AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*", "matchCriteriaId": "E8759E40-63D2-4FA4-9A40-CB330413798E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. \r\n \r\nThis vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition."}, {"lang": "es", "value": "M\u00faltiples productos Cisco se ven afectados por una vulnerabilidad en la caracter\u00edstica de Visual Basic para Aplicaciones (VBA) de Snort 3 que podr\u00eda permitir a un atacante remoto no autenticado causar la ca\u00edda del motor de detecci\u00f3n de Snort 3.\n\nEsta vulnerabilidad se debe a la falta de una comprobaci\u00f3n de errores adecuada al descomprimir datos VBA. Un atacante podr\u00eda explotar esta vulnerabilidad enviando datos VBA manipulados al motor de detecci\u00f3n de Snort 3 en el dispositivo objetivo. Un exploit exitoso podr\u00eda permitir al atacante causar que el motor de detecci\u00f3n de Snort 3 se reinicie inesperadamente, provocando una condici\u00f3n de denegaci\u00f3n de servicio (DoS)."}], "id": "CVE-2026-20057", "lastModified": "2026-08-20T15:10:19.563", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20057", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-04T21:32:36.004303Z", "version": "2.0.3"}}]}, "published": "2026-03-04T18:16:20.320", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory", "Mitigation"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-369"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.13.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.14.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.3a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.16.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.4a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.2c"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.4b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.2a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.17.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.3a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.15.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5c"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.15.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.18.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.18.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.4c"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5d"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.18.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Cisco UTD SNORT IPS Engine Software", "source": "cna", "vendor": "Cisco"}, "product": "cisco_utd_snort_ips_engine_software", "vendor": "cisco"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.1.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.0.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.2.X"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.3.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.4.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.4.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.1.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.1.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.1.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.3.1"}}], "enrichment": {"confidence": 86.0, "confidence_source": "matching", "scores": [{"score": 86.0, "source": "matching"}]}, "original": {"product": "Cisco Cyber Vision", "source": "cna", "vendor": "Cisco"}, "product": "cyber_vision", "vendor": "cisco"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.2.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.2.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.3.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.2.5.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.2.5.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.3.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.2.8.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.7.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.6.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.7.10.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.2.10.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.3"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Cisco Secure Firewall Threat Defense (FTD) Software", "source": "cna", "vendor": "Cisco"}, "product": "secure_firewall_threat_defense", "vendor": "cisco"}], "analysis": {"en": {"generated_at": "2026-04-16T13:19:51.925654+00:00", "value": {"mitigation_remediation": ["Download and install the latest Cisco Secure Firewall Threat Defense update that addresses the Snort 3 VBA decompression issue.", "If the patch cannot be applied immediately, disable the Snort 3 Detection Engine or block incoming VBA payloads to prevent the denial of service until the update is applied.", "Continuously monitor firewall logs for repeated crashes or service restarts, and consider activating alerting on unexpected engine restart events to detect exploitation attempts."], "summary": {"action": "Apply Patch", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "Cisco Secure Firewall Threat Defense, Cisco UTD SNORT IPS Engine, and Cisco Cyber Vision are affected. The advisory does not list specific firmware or software versions; users should consult the referenced Cisco advisory for precise guidance on which releases are impacted.", "description_and_impact": "The vulnerability resides in the Snort 3 Visual Basic for Applications (VBA) decompression routine, where the system fails to perform adequate error checking. This flaw can be exploited by sending a specially crafted VBA payload to the Snort 3 Detection Engine, causing it to crash and trigger a restart. The resulting denial of service disables the host\u2019s intrusion detection capability without requiring authentication, representing a moderate risk of service denial (CVSS 5.8).", "risk_and_exploitability": "The exploit is carried out remotely from an unauthenticated attacker who crafts VBA data and delivers it to the targeted device. The EPSS score is less than 1%, indicating a low probability of active exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Despite the moderate CVSS rating, the low exploit likelihood coupled with the critical role of Snort 3 in threat detection suggests that the risk is moderate but should not be ignored, particularly in high\u2011visibility or regulated environments."}}}}, "created": "2026-03-05T09:06:17.215326+00:00", "updated": "2026-04-16T13:30:16.034978+00:00", "vendors": ["cisco", "cisco$PRODUCT$cisco_utd_snort_ips_engine_software", "cisco$PRODUCT$cyber_vision", "cisco$PRODUCT$secure_firewall_threat_defense"]}