PT-2025-33317 · Cisco+1 · Cisco Secure Firewall Threat Defense+1

Published 2025-08-14 · Updated 2025-08-15 · CVE-2025-20217

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Threat Defense (FTD) Software Snort 3 Detection Engine (affected versions not specified)

Description: A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine could allow a remote, unauthenticated attacker to cause a denial of service (DoS) condition on an affected device. This issue is due to incorrect processing of traffic during inspection. An attacker could exploit this by sending crafted traffic, causing the device to enter an infinite loop and resulting in a DoS condition. The system watchdog will automatically restart the Snort process.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2025-10353

CVE-2025-20217

Affected Products

Cisco Secure Firewall Threat Defense

Snort 3

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-20217 · Security Note
• https://bdu.fstec.ru/vul/2025-10353 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-SvKhtjgt · Vendor Advisory
• https://twitter.com/CveFindCom/status/1956041198688252182 · Twitter Post
• https://twitter.com/CybrPulse/status/1956420369092354289 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1956181915095949470 · Twitter Post
• https://t.me/true_secator/7332 · Telegram Post
• https://twitter.com/CVEnew/status/1956390339314409643 · Twitter Post
• https://twitter.com/SystemTek_UK/status/1956057540044751205 · Twitter Post
• https://twitter.com/0dayPublishing/status/1956045498818719901 · Twitter Post