PT-2024-9127 · Cisco · Cisco Firepower Services+2
Published
2024-10-23
·
Updated
2025-08-11
·
CVE-2024-20351
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)
Cisco FirePOWER Services (affected versions not specified)
Description:
A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine could allow an unauthenticated, remote attacker to cause legitimate network traffic to be dropped, resulting in a denial of service (DoS) condition. This is due to the improper handling of TCP/IP network traffic. An attacker could exploit this by sending a large amount of TCP/IP network traffic through the affected device, causing the device to drop network traffic and resulting in a DoS condition. The affected device must be rebooted to resolve the DoS condition.
Recommendations:
For Cisco Firepower Threat Defense (FTD) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Cisco FirePOWER Services, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Firepower Services
Cisco Ftd
Snort Detection Engine