Vulnerabilities > CVE-2020-3299

CVSS 5.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cisco

snort

NVD

Published: 2020-10-21

Updated: 2023-05-22

Summary

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for HTTP. The vulnerability is due to incorrect detection of modified HTTP packets used in chunked responses. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured File Policy for HTTP packets and deliver a malicious payload.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Firepower Threat Defense 6.0.0 Cisco Firepower Threat Defense 6.0.0.1 Cisco Firepower Threat Defense 6.0.1 Cisco Firepower Threat Defense 6.0.1.1 Cisco Firepower Threat Defense 6.0.1.2 Cisco Firepower Threat Defense 6.0.1.3 Cisco Firepower Threat Defense 6.0.1.4 Cisco Firepower Threat Defense 6.1.0 Cisco Firepower Threat Defense 6.1.0.1 Cisco Firepower Threat Defense 6.1.0.2 Cisco Firepower Threat Defense 6.1.0.3 Cisco Firepower Threat Defense 6.1.0.4 Cisco Firepower Threat Defense 6.1.0.5 Cisco Firepower Threat Defense 6.1.0.6 Cisco Firepower Threat Defense 6.1.0.7 Cisco Firepower Threat Defense 6.2.0 Cisco Firepower Threat Defense 6.2.0.1 Cisco Firepower Threat Defense 6.2.0.2 Cisco Firepower Threat Defense 6.2.0.3 Cisco Firepower Threat Defense 6.2.0.4 Cisco Firepower Threat Defense 6.2.0.5 Cisco Firepower Threat Defense 6.2.0.6 Cisco Firepower Threat Defense 6.2.1 Cisco Firepower Threat Defense 6.2.2 Cisco Firepower Threat Defense 6.2.2.1 Cisco Firepower Threat Defense 6.2.2.2 Cisco Firepower Threat Defense 6.2.2.3 Cisco Firepower Threat Defense 6.2.2.4 Cisco Firepower Threat Defense 6.2.2.5 Cisco Firepower Threat Defense 6.2.3 Cisco Firepower Threat Defense 6.2.3.0 Cisco Firepower Threat Defense 6.2.3.1 Cisco Firepower Threat Defense 6.2.3.2 Cisco Firepower Threat Defense 6.2.3.3 Cisco Firepower Threat Defense 6.2.3.4 Cisco Firepower Threat Defense 6.2.3.5 Cisco Firepower Threat Defense 6.2.3.6 Cisco Firepower Threat Defense 6.2.3.7 Cisco Firepower Threat Defense 6.2.3.8 Cisco Firepower Threat Defense 6.2.3.9 Cisco Firepower Threat Defense 6.2.3.10 Cisco Firepower Threat Defense 6.2.3.11 Cisco Firepower Threat Defense 6.2.3.12 Cisco Firepower Threat Defense 6.2.3.13 Cisco Firepower Threat Defense 6.2.3.14 Cisco Firepower Threat Defense 6.2.3.15 Cisco Firepower Threat Defense 6.2.3.16 Cisco Firepower Threat Defense 6.2.3.17 Cisco Firepower Threat Defense 6.2.3.18 Cisco Firepower Threat Defense 6.3.0 Cisco Cloud Services Router 1000V - Cisco Isrv -	52
Application	Snort Snort Snort - Snort Snort 1.6 Snort Snort 1.8.0 Snort Snort 1.8.1 Snort Snort 1.8.2 Snort Snort 1.8.3 Snort Snort 1.8.4 Snort Snort 1.8.5 Snort Snort 1.8.6 Snort Snort 1.8.7 Snort Snort 1.9.0 Snort Snort 1.9.1 Snort Snort 2.0 Snort Snort 2.6.1 Snort Snort 2.6.1.1 Snort Snort 2.6.1.2 Snort Snort 2.6.2 Snort Snort 2.7_Beta1 Snort Snort 2.9.11.1 Snort Snort 2.9.12.0 Snort Snort 2.9.13.0	23
Hardware	Cisco Cisco 1100 4P - Cisco 1100 8P - Cisco 1101 4P - Cisco 1109 2P - Cisco 1109 4P - Cisco 1111X 8P - Cisco 4221 Integrated Services Router - Cisco 4331 Integrated Services Router - Cisco 4431 Integrated Services Router - Cisco 4461 Integrated Services Router - Cisco ISA 3000 - Cisco Meraki MX -	12

Vulnerabilities > CVE-2020-3299 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-3299"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-3299