CVE-2026-20068

Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability

Published Mar 4, 2026 CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Description
Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.

This vulnerability is due to incomplete error checking when parsing remote procedure call (RPC) data. An attacker could exploit this vulnerability by sending crafted RPC packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Cisco snort
Cisco unified Threat Defense Snort Intrusion Prevention System Engine
CPEs cpe:2.3:a:cisco:cyber_vision:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.1.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.2.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.2.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.3.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.3.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.4.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.4.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:4.4.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:cyber_vision:5.3.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.9:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10:*:*:*:*:*:*:*
cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.10.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.11.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.2.1r:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.6:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.7:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.8a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1b:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.3a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.6:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.6a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.7:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.8a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.8.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.1a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.2a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.3a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.4a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5e:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5f:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.6:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.7a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.7b:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.8:*:*:*:*:*:*:*
Vendors & Products Cisco snort
Cisco unified Threat Defense Snort Intrusion Prevention System Engine
Type Values Removed Values Added
First Time appeared Cisco
Cisco cisco Utd Snort Ips Engine Software
Cisco cyber Vision
Cisco secure Firewall Threat Defense
Vendors & Products Cisco
Cisco cisco Utd Snort Ips Engine Software
Cisco cyber Vision
Cisco secure Firewall Threat Defense
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when parsing remote procedure call (RPC) data. An attacker could exploit this vulnerability by sending crafted RPC packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts.
Title Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability
Weaknesses CWE-248
References
Metrics cvssV3_1

{'score': 5.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Mar 4, 2026, 8:26 PM
Reserved
Oct 8, 2025, 11:59 AM
Status
Analyzed
Published
Mar 4, 2026, 6:16 PM
Modified
Aug 18, 2026, 6:32 PM