CVE-2026-20066

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20066", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.357Z", "datePublished": "2026-03-04T17:49:00.716Z", "dateUpdated": "2026-03-04T20:46:18.739Z"}, "containers": {"cna": {"title": "Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "baseScore": 5.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}}], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in the JSTokenizer normalization logic when the HTTP inspection normalizes JavaScript. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine restarts unexpectedly. JSTokenizer is not enabled by default."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz", "name": "cisco-sa-snort3-multi-dos-XFWkWSwz"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-snort3-multi-dos-XFWkWSwz", "discovery": "INTERNAL", "defects": ["CSCwq23374"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Uncontrolled Resource Consumption", "type": "cwe", "cweId": "CWE-400"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"version": "7.4.0", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.4.1.1", "status": "affected"}, {"version": "7.6.0", "status": "affected"}, {"version": "7.4.2", "status": "affected"}, {"version": "7.4.2.1", "status": "affected"}, {"version": "7.7.0", "status": "affected"}, {"version": "7.4.2.2", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.4.2.3", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.7.10", "status": "affected"}, {"version": "7.6.2.1", "status": "affected"}, {"version": "7.7.10.1", "status": "affected"}, {"version": "7.4.2.4", "status": "affected"}, {"version": "7.4.3", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco UTD SNORT IPS Engine Software", "versions": [{"version": "17.3.1a", "status": "affected"}, {"version": "17.2.1r", "status": "affected"}, {"version": "17.3.2", "status": "affected"}, {"version": "17.4.1a", "status": "affected"}, {"version": "17.5.1", "status": "affected"}, {"version": "17.3.3", "status": "affected"}, {"version": "17.5.1a", "status": "affected"}, {"version": "17.3.4", "status": "affected"}, {"version": "17.3.4a", "status": "affected"}, {"version": "17.4.2", "status": "affected"}, {"version": "17.4.1b", "status": "affected"}, {"version": "17.6.1a", "status": "affected"}, {"version": "17.7.1a", "status": "affected"}, {"version": "17.6.2", "status": "affected"}, {"version": "17.8.1a", "status": "affected"}, {"version": "17.3.5", "status": "affected"}, {"version": "17.6.3", "status": "affected"}, {"version": "17.6.3a", "status": "affected"}, {"version": "17.7.2", "status": "affected"}, {"version": "17.9.1a", "status": "affected"}, {"version": "17.6.4", "status": "affected"}, {"version": "17.10.1a", "status": "affected"}, {"version": "17.3.6", "status": "affected"}, {"version": "17.3.7", "status": "affected"}, {"version": "17.9.2a", "status": "affected"}, {"version": "17.6.5", "status": "affected"}, {"version": "17.11.1a", "status": "affected"}, {"version": "17.9.3a", "status": "affected"}, {"version": "17.12.1a", "status": "affected"}, {"version": "17.9.4", "status": "affected"}, {"version": "17.6.6", "status": "affected"}, {"version": "17.3.8", "status": "affected"}, {"version": "17.3.8a", "status": "affected"}, {"version": "17.6.6a", "status": "affected"}, {"version": "17.9.4a", "status": "affected"}, {"version": "17.12.2", "status": "affected"}, {"version": "17.13.1a", "status": "affected"}, {"version": "17.9.5a", "status": "affected"}, {"version": "17.12.3", "status": "affected"}, {"version": "17.6.7", "status": "affected"}, {"version": "17.14.1a", "status": "affected"}, {"version": "17.12.4", "status": "affected"}, {"version": "17.12.3a", "status": "affected"}, {"version": "17.15.1a", "status": "affected"}, {"version": "17.6.8", "status": "affected"}, {"version": "17.9.6", "status": "affected"}, {"version": "17.6.8a", "status": "affected"}, {"version": "17.16.1a", "status": "affected"}, {"version": "17.9.5e", "status": "affected"}, {"version": "17.12.4a", "status": "affected"}, {"version": "17.15.2c", "status": "affected"}, {"version": "17.9.5f", "status": "affected"}, {"version": "17.12.4b", "status": "affected"}, {"version": "17.15.2a", "status": "affected"}, {"version": "17.12.5", "status": "affected"}, {"version": "17.17.1", "status": "affected"}, {"version": "17.12.5a", "status": "affected"}, {"version": "17.9.7a", "status": "affected"}, {"version": "17.15.3a", "status": "affected"}, {"version": "17.15.3", "status": "affected"}, {"version": "17.12.5b", "status": "affected"}, {"version": "17.12.5c", "status": "affected"}, {"version": "17.15.4", "status": "affected"}, {"version": "17.9.7b", "status": "affected"}, {"version": "17.18.1", "status": "affected"}, {"version": "17.18.1a", "status": "affected"}, {"version": "17.12.6", "status": "affected"}, {"version": "17.9.8", "status": "affected"}, {"version": "17.15.4c", "status": "affected"}, {"version": "17.12.5d", "status": "affected"}, {"version": "17.18.2", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-04T17:49:00.716Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-04T20:46:03.613675Z", "id": "CVE-2026-20066", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-04T20:46:18.739Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20066", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-04T20:46:03.613675Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-04T20:46:13.165Z"}}], "cna": {"title": "Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability", "source": {"defects": ["CSCwq23374"], "advisory": "cisco-sa-snort3-multi-dos-XFWkWSwz", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"status": "affected", "version": "7.4.0"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.4.1.1"}, {"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "7.4.2.1"}, {"status": "affected", "version": "7.7.0"}, {"status": "affected", "version": "7.4.2.2"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.4.2.3"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.10"}, {"status": "affected", "version": "7.6.2.1"}, {"status": "affected", "version": "7.7.10.1"}, {"status": "affected", "version": "7.4.2.4"}, {"status": "affected", "version": "7.4.3"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco UTD SNORT IPS Engine Software", "versions": [{"status": "affected", "version": "17.3.1a"}, {"status": "affected", "version": "17.2.1r"}, {"status": "affected", "version": "17.3.2"}, {"status": "affected", "version": "17.4.1a"}, {"status": "affected", "version": "17.5.1"}, {"status": "affected", "version": "17.3.3"}, {"status": "affected", "version": "17.5.1a"}, {"status": "affected", "version": "17.3.4"}, {"status": "affected", "version": "17.3.4a"}, {"status": "affected", "version": "17.4.2"}, {"status": "affected", "version": "17.4.1b"}, {"status": "affected", "version": "17.6.1a"}, {"status": "affected", "version": "17.7.1a"}, {"status": "affected", "version": "17.6.2"}, {"status": "affected", "version": "17.8.1a"}, {"status": "affected", "version": "17.3.5"}, {"status": "affected", "version": "17.6.3"}, {"status": "affected", "version": "17.6.3a"}, {"status": "affected", "version": "17.7.2"}, {"status": "affected", "version": "17.9.1a"}, {"status": "affected", "version": "17.6.4"}, {"status": "affected", "version": "17.10.1a"}, {"status": "affected", "version": "17.3.6"}, {"status": "affected", "version": "17.3.7"}, {"status": "affected", "version": "17.9.2a"}, {"status": "affected", "version": "17.6.5"}, {"status": "affected", "version": "17.11.1a"}, {"status": "affected", "version": "17.9.3a"}, {"status": "affected", "version": "17.12.1a"}, {"status": "affected", "version": "17.9.4"}, {"status": "affected", "version": "17.6.6"}, {"status": "affected", "version": "17.3.8"}, {"status": "affected", "version": "17.3.8a"}, {"status": "affected", "version": "17.6.6a"}, {"status": "affected", "version": "17.9.4a"}, {"status": "affected", "version": "17.12.2"}, {"status": "affected", "version": "17.13.1a"}, {"status": "affected", "version": "17.9.5a"}, {"status": "affected", "version": "17.12.3"}, {"status": "affected", "version": "17.6.7"}, {"status": "affected", "version": "17.14.1a"}, {"status": "affected", "version": "17.12.4"}, {"status": "affected", "version": "17.12.3a"}, {"status": "affected", "version": "17.15.1a"}, {"status": "affected", "version": "17.6.8"}, {"status": "affected", "version": "17.9.6"}, {"status": "affected", "version": "17.6.8a"}, {"status": "affected", "version": "17.16.1a"}, {"status": "affected", "version": "17.9.5e"}, {"status": "affected", "version": "17.12.4a"}, {"status": "affected", "version": "17.15.2c"}, {"status": "affected", "version": "17.9.5f"}, {"status": "affected", "version": "17.12.4b"}, {"status": "affected", "version": "17.15.2a"}, {"status": "affected", "version": "17.12.5"}, {"status": "affected", "version": "17.17.1"}, {"status": "affected", "version": "17.12.5a"}, {"status": "affected", "version": "17.9.7a"}, {"status": "affected", "version": "17.15.3a"}, {"status": "affected", "version": "17.15.3"}, {"status": "affected", "version": "17.12.5b"}, {"status": "affected", "version": "17.12.5c"}, {"status": "affected", "version": "17.15.4"}, {"status": "affected", "version": "17.9.7b"}, {"status": "affected", "version": "17.18.1"}, {"status": "affected", "version": "17.18.1a"}, {"status": "affected", "version": "17.12.6"}, {"status": "affected", "version": "17.9.8"}, {"status": "affected", "version": "17.15.4c"}, {"status": "affected", "version": "17.12.5d"}, {"status": "affected", "version": "17.18.2"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz", "name": "cisco-sa-snort3-multi-dos-XFWkWSwz"}], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in the JSTokenizer normalization logic when the HTTP inspection normalizes JavaScript. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine restarts unexpectedly. JSTokenizer is not enabled by default."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-400", "description": "Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-04T17:49:00.716Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20066", "state": "PUBLISHED", "dateUpdated": "2026-03-04T20:46:18.739Z", "dateReserved": "2025-10-08T11:59:15.357Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-03-04T17:49:00.716Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "7.4.0"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.4.1.1"}, {"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "7.4.2.1"}, {"status": "affected", "version": "7.7.0"}, {"status": "affected", "version": "7.4.2.2"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.4.2.3"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.10"}, {"status": "affected", "version": "7.6.2.1"}, {"status": "affected", "version": "7.7.10.1"}, {"status": "affected", "version": "7.4.2.4"}, {"status": "affected", "version": "7.4.3"}]}, {"defaultStatus": "unknown", "product": "Cisco UTD SNORT IPS Engine Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "17.3.1a"}, {"status": "affected", "version": "17.2.1r"}, {"status": "affected", "version": "17.3.2"}, {"status": "affected", "version": "17.4.1a"}, {"status": "affected", "version": "17.5.1"}, {"status": "affected", "version": "17.3.3"}, {"status": "affected", "version": "17.5.1a"}, {"status": "affected", "version": "17.3.4"}, {"status": "affected", "version": "17.3.4a"}, {"status": "affected", "version": "17.4.2"}, {"status": "affected", "version": "17.4.1b"}, {"status": "affected", "version": "17.6.1a"}, {"status": "affected", "version": "17.7.1a"}, {"status": "affected", "version": "17.6.2"}, {"status": "affected", "version": "17.8.1a"}, {"status": "affected", "version": "17.3.5"}, {"status": "affected", "version": "17.6.3"}, {"status": "affected", "version": "17.6.3a"}, {"status": "affected", "version": "17.7.2"}, {"status": "affected", "version": "17.9.1a"}, {"status": "affected", "version": "17.6.4"}, {"status": "affected", "version": "17.10.1a"}, {"status": "affected", "version": "17.3.6"}, {"status": "affected", "version": "17.3.7"}, {"status": "affected", "version": "17.9.2a"}, {"status": "affected", "version": "17.6.5"}, {"status": "affected", "version": "17.11.1a"}, {"status": "affected", "version": "17.9.3a"}, {"status": "affected", "version": "17.12.1a"}, {"status": "affected", "version": "17.9.4"}, {"status": "affected", "version": "17.6.6"}, {"status": "affected", "version": "17.3.8"}, {"status": "affected", "version": "17.3.8a"}, {"status": "affected", "version": "17.6.6a"}, {"status": "affected", "version": "17.9.4a"}, {"status": "affected", "version": "17.12.2"}, {"status": "affected", "version": "17.13.1a"}, {"status": "affected", "version": "17.9.5a"}, {"status": "affected", "version": "17.12.3"}, {"status": "affected", "version": "17.6.7"}, {"status": "affected", "version": "17.14.1a"}, {"status": "affected", "version": "17.12.4"}, {"status": "affected", "version": "17.12.3a"}, {"status": "affected", "version": "17.15.1a"}, {"status": "affected", "version": "17.6.8"}, {"status": "affected", "version": "17.9.6"}, {"status": "affected", "version": "17.6.8a"}, {"status": "affected", "version": "17.16.1a"}, {"status": "affected", "version": "17.9.5e"}, {"status": "affected", "version": "17.12.4a"}, {"status": "affected", "version": "17.15.2c"}, {"status": "affected", "version": "17.9.5f"}, {"status": "affected", "version": "17.12.4b"}, {"status": "affected", "version": "17.15.2a"}, {"status": "affected", "version": "17.12.5"}, {"status": "affected", "version": "17.17.1"}, {"status": "affected", "version": "17.12.5a"}, {"status": "affected", "version": "17.9.7a"}, {"status": "affected", "version": "17.15.3a"}, {"status": "affected", "version": "17.15.3"}, {"status": "affected", "version": "17.12.5b"}, {"status": "affected", "version": "17.12.5c"}, {"status": "affected", "version": "17.15.4"}, {"status": "affected", "version": "17.9.7b"}, {"status": "affected", "version": "17.18.1"}, {"status": "affected", "version": "17.18.1a"}, {"status": "affected", "version": "17.12.6"}, {"status": "affected", "version": "17.9.8"}, {"status": "affected", "version": "17.15.4c"}, {"status": "affected", "version": "17.12.5d"}, {"status": "affected", "version": "17.18.2"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*", "matchCriteriaId": "606A4798-5C4F-4144-9664-28B80B843B3F", "versionEndExcluding": "3.9.7.0", "versionStartIncluding": "3.0.0-233", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "5BC88149-095A-41DE-AA27-1CFD21125EF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "BA983223-35AE-4D2F-B2F5-BA0614908C3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "17A31A33-2E84-4C79-86BD-1E9FF4C1DD09", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "B58DC884-9430-49D4-AA8B-7FEB7505B7A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5EC075D4-0033-46ED-9E55-576997424382", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "EA94FBB2-E095-48A3-BA39-5C2EC01D0ACA", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "D61D406F-6796-4E90-A954-285F6A3785AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "24DA7AE5-6288-4901-B9C9-36DF3788AA9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "55A60A76-D206-43B2-B6B1-94757FB3E258", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "E91D9CAD-174A-4AAE-AB14-BD3110F9CFA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "8EC515FD-4D9A-428D-9E72-9014C613A0E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "5B53EBBB-8E55-4D94-ADD3-C93630E09241", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "D9033AA9-2481-406A-8FBD-C671D3888D98", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "2F843EFD-0130-45F0-A212-9921879F3CBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10:*:*:*:*:*:*:*", "matchCriteriaId": "47EFC734-E450-4606-939A-86BE0F7FC5E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "814577AF-98E9-49A8-8F1C-BF938D4F1F29", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.2.1r:*:*:*:*:*:*:*", "matchCriteriaId": "2FEB2A57-CF8F-4E87-939A-5B3EF7E5E0A9", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.1a:*:*:*:*:*:*:*", "matchCriteriaId": "7BA9E488-2A54-4226-B413-89D141362350", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "359EDE5C-4017-487A-B3D3-F22A42165E89", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "D024AF06-DCB5-44B4-A985-07EDC093DBB0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "373F1DDC-E1A7-496F-A86D-3724266D3143", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4a:*:*:*:*:*:*:*", "matchCriteriaId": "A28594C9-139A-4EE4-81D9-C7E96A1DD886", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "6FF04B8F-FE64-4E5B-BC70-BC841D49CB31", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "88389DCF-E7E3-4623-A1CD-98B4181AEAD0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "AD638D05-389F-4AEE-B23E-24963CBE9C9E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "A3B8E4FB-A590-427B-BFDB-457863AECECF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.8a:*:*:*:*:*:*:*", "matchCriteriaId": "A03C231B-006A-4EB6-BC07-EC39B31E5A44", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1a:*:*:*:*:*:*:*", "matchCriteriaId": "018F06B0-1486-4822-B2EA-4449652919EC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1b:*:*:*:*:*:*:*", "matchCriteriaId": "ADEC96FA-5B14-43AD-B83A-AA630941DD5F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "6D3B1688-5301-4799-9AAC-DC7ED4497AAE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "8B5FDEDF-B870-4204-BADC-92805F431BAC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1a:*:*:*:*:*:*:*", "matchCriteriaId": "B0A61788-FA7B-4506-90DF-17ED5053C3A0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.1a:*:*:*:*:*:*:*", "matchCriteriaId": "245ED9C3-4B16-4CC1-BC78-B4AED938C0B6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "CC21847D-908F-45C0-9A97-E77DE1C4A8D8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "7C7C7C6B-7AE3-47D1-B028-ADC38FA0FD0A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.3a:*:*:*:*:*:*:*", "matchCriteriaId": "62B30C61-45C9-4F5D-979B-087ABA880AE3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "90DCBE28-910B-418E-AD93-EA0BB69913D7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "EED24474-335B-4595-A4B1-A2F1E9590AFC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.6:*:*:*:*:*:*:*", "matchCriteriaId": "CBCF8B3B-1F42-43CF-A328-9381BA459262", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.6a:*:*:*:*:*:*:*", "matchCriteriaId": "7972B301-8287-426B-9C08-231B9C2F3FD4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.7:*:*:*:*:*:*:*", "matchCriteriaId": "C53D590F-C0D4-49FA-8D7F-82A67B72E648", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.8:*:*:*:*:*:*:*", "matchCriteriaId": "E13E1D2B-C731-489B-8CCE-EE7E52FD66A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.8a:*:*:*:*:*:*:*", "matchCriteriaId": "1BC47AEA-C91C-4146-B3AB-4943A12AE0FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.1a:*:*:*:*:*:*:*", "matchCriteriaId": "D39700C2-E83C-4ECE-9640-CEFBDD18DC4C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "EA09D285-3016-4042-9078-F94254C330B6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.8.1a:*:*:*:*:*:*:*", "matchCriteriaId": "0286B57C-2E00-48F9-B3B4-E2EF3E874218", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.1a:*:*:*:*:*:*:*", "matchCriteriaId": "4CAE0CE2-590E-4E34-8B58-7DA63F00CDCC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.2a:*:*:*:*:*:*:*", "matchCriteriaId": "674F9AE5-38C6-4C7D-A73A-F9C4C23B5BAF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.3a:*:*:*:*:*:*:*", "matchCriteriaId": "5B248BC8-83EE-4D84-82CE-5E0E9A857246", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "45BB9F2F-83C3-4F9E-BAD4-C0E7E4A0D244", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.4a:*:*:*:*:*:*:*", "matchCriteriaId": "5F6D75BF-CB3C-4FEF-8631-937B86E9498C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5a:*:*:*:*:*:*:*", "matchCriteriaId": "D247882B-DDA4-47A6-A2B0-2AFFCB94F133", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5e:*:*:*:*:*:*:*", "matchCriteriaId": "AF063216-0D24-4271-B281-9D1F94BED2A1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5f:*:*:*:*:*:*:*", "matchCriteriaId": "D6BD4FE6-8C91-46AB-94D5-9373C160235D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "19F3B076-F66D-4E18-8A0A-1293C985B4A1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.7a:*:*:*:*:*:*:*", "matchCriteriaId": "6CC1D6D9-D0CF-4AB3-AC1C-63A582B6C366", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.7b:*:*:*:*:*:*:*", "matchCriteriaId": "7F93F4AC-7904-4B10-BB09-C8BDE9AF3044", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.8:*:*:*:*:*:*:*", "matchCriteriaId": "FC67331D-D990-4263-BD3B-81B1592EFE7F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.10.1a:*:*:*:*:*:*:*", "matchCriteriaId": "1544457A-A442-4E64-AC20-DC805D5C7840", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.11.1a:*:*:*:*:*:*:*", "matchCriteriaId": "3F45D0BD-724A-4D44-9192-D52FAF2E51FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*", "matchCriteriaId": "8FC4D3D8-4391-4ED6-B27B-EF47C96904CD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*", "matchCriteriaId": "60AE1B18-3CEB-45B3-A43D-3C6DCC1F20F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*", "matchCriteriaId": "9F4AA555-A8AD-4EF1-BDED-CCB550AA7560", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*", "matchCriteriaId": "158ADFDB-D308-40AA-A445-BB9AF2F2414B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*", "matchCriteriaId": "5F44916C-A0B3-40B1-B9E5-ACED3A0ECC80", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*", "matchCriteriaId": "A685AE11-0D19-4F98-B1A1-F40C66407A20", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*", "matchCriteriaId": "8E0C23C5-4248-485F-8132-8459933EBDE5", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*", "matchCriteriaId": "410D8A3B-CCD3-4BBC-BF03-63717B397E33", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*", "matchCriteriaId": "57D161E1-A275-44B1-AAC5-7A5207243A8B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*", "matchCriteriaId": "AB1C329A-CFA4-432C-926C-AD4EE14D30BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*", "matchCriteriaId": "BAA951FD-37B6-4D5B-BC88-5FD6E1A670EF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*", "matchCriteriaId": "CD3F8898-782F-49DA-8FB4-625BCB08C267", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*", "matchCriteriaId": "3D17AF21-1F77-425F-9DC0-42E4F82309C7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*", "matchCriteriaId": "AA3E7D96-E406-4CB5-91FC-A0FD5D94A876", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*", "matchCriteriaId": "07AAFFE0-B85D-4A62-894B-20A05973CC5D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*", "matchCriteriaId": "7842C05A-F9DE-49A7-8478-A1EF324C593D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*", "matchCriteriaId": "9A6C2814-0DAC-40AF-9494-3EEA9429F603", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*", "matchCriteriaId": "25A353E7-5F9E-4A94-BDA9-598C54572FEF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*", "matchCriteriaId": "70B8BACE-F390-402E-B80B-F57F473B1415", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*", "matchCriteriaId": "7E984118-99E5-45BC-B238-E950E62E1A77", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*", "matchCriteriaId": "3825888B-D34F-466F-9E91-CBDE7A07B43C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*", "matchCriteriaId": "2E88110E-78DE-4799-8F22-37E8B010DF81", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*", "matchCriteriaId": "D1D5E95D-1CE2-472B-A4C6-E098B01BA3FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*", "matchCriteriaId": "6D8E05E5-1957-44D0-BD34-45A9AB4782B8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*", "matchCriteriaId": "7AB3A273-B0E6-4659-91C4-77F0192EE1DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*", "matchCriteriaId": "2FFB4BE9-4CC8-49F2-851C-F4EA098BA3AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*", "matchCriteriaId": "E8759E40-63D2-4FA4-9A40-CB330413798E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in the JSTokenizer normalization logic when the HTTP inspection normalizes JavaScript. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine restarts unexpectedly. JSTokenizer is not enabled by default."}, {"lang": "es", "value": "M\u00faltiples productos Cisco se ven afectados por una vulnerabilidad en el motor de detecci\u00f3n Snort 3 que podr\u00eda permitir a un atacante remoto no autenticado provocar el reinicio del motor de detecci\u00f3n Snort 3, lo que resultar\u00eda en una interrupci\u00f3n de la inspecci\u00f3n de paquetes.\n\nEsta vulnerabilidad se debe a un error en la l\u00f3gica de normalizaci\u00f3n de JSTokenizer cuando la inspecci\u00f3n HTTP normaliza JavaScript. Un atacante podr\u00eda explotar esta vulnerabilidad enviando paquetes HTTP manipulados a trav\u00e9s de una conexi\u00f3n establecida que es analizada por Snort 3. Un exploit exitoso podr\u00eda permitir al atacante provocar una condici\u00f3n de DoS cuando el motor de detecci\u00f3n Snort 3 se reinicia inesperadamente. JSTokenizer no est\u00e1 habilitado por defecto."}], "id": "CVE-2026-20066", "lastModified": "2026-08-19T20:33:09.877", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20066", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-04T20:46:03.613675Z", "version": "2.0.3"}}]}, "published": "2026-03-04T18:16:21.670", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.3.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.2.1r"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.4.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.5.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.3.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.5.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.3.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.3.4a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.4.1b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.6.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.7.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.6.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.8.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.3.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.6.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.6.3a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.7.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.6.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.10.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.3.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.3.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.2a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.6.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.11.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.3a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.9.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.6.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.3.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.3.8a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.6.6a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.4a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.13.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.5a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.6.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.14.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.3a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.6.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.9.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.6.8a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.16.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.5e"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.4a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.2c"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.5f"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.4b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.2a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.17.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.7a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.3a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.15.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5c"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.15.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.9.7b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.18.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.18.1a"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.12.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.9.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.15.4c"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "17.12.5d"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "17.18.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Cisco UTD SNORT IPS Engine Software", "source": "cna", "vendor": "Cisco"}, "product": "cisco_utd_snort_ips_engine_software", "vendor": "cisco"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.6.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.7.10.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4.2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.3"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Cisco Secure Firewall Threat Defense (FTD) Software", "source": "cna", "vendor": "Cisco"}, "product": "secure_firewall_threat_defense", "vendor": "cisco"}], "analysis": {"en": {"generated_at": "2026-04-16T13:17:54.002993+00:00", "value": {"mitigation_remediation": ["Apply any Cisco-published patches or firmware updates that address the Snort\u00a03 Discovery Engine issue.", "If feasible, disable the JSTokenizer or JavaScript HTTP inspection in the Snort\u00a03 configuration to prevent the flaw from being triggered.", "Continuously monitor system logs for unexpected restarts or denial of service events and apply vendor updates promptly."], "summary": {"action": "Patch", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "The flaw impacts Cisco Secure Firewall Threat Defense (FTD) Software and Cisco UTD SNORT IPS Engine Software. Specific product versions are not disclosed in the advisory.", "description_and_impact": "The affected Snort\u00a03 Detection Engine contains a flaw in JSTokenizer normalization during HTTP inspection of JavaScript. An attacker can send crafted HTTP packets over an existing connection to trigger a crash, causing the engine to restart unexpectedly. The outcome is a denial of service, temporarily disabling packet inspection and potentially leading to loss of security coverage.", "risk_and_exploitability": "The CVSS score is\u00a05.8, indicating a moderate risk. The EPSS score is less than\u00a01% and the vulnerability is not listed in the CISA KEV catalog, suggesting a low exploitation probability in the wild. The vulnerability is reachable by an unauthenticated remote attacker who can send specially crafted HTTP packets over an established connection, as the flaw arises during HTTP inspection of JavaScript. The effective attack vector is remote network traffic, and the attacker needs only to craft the payload; no privileged access is required."}}}}, "created": "2026-03-05T09:06:13.583260+00:00", "updated": "2026-04-16T13:30:16.030233+00:00", "vendors": ["cisco", "cisco$PRODUCT$cisco_utd_snort_ips_engine_software", "cisco$PRODUCT$secure_firewall_threat_defense"]}