FKIE_CVE-2026-20057
Vulnerability from fkie_nvd - Published: 2026-03-04 18:16 - Updated: 2026-08-20 15:10
Severity
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.
This vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition.
References
| URL | Tags | ||
|---|---|---|---|
| psirt@cisco.com | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed | Vendor Advisory, Mitigation |
Impacted products
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unknown",
"product": "Cisco Cyber Vision",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.3"
},
{
"status": "affected",
"version": "3.2.4"
},
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.1.0"
},
{
"status": "affected",
"version": "4.1.1"
},
{
"status": "affected",
"version": "4.1.2"
},
{
"status": "affected",
"version": "4.1.3"
},
{
"status": "affected",
"version": "4.1.4"
},
{
"status": "affected",
"version": "4.2.0"
},
{
"status": "affected",
"version": "4.2.1"
},
{
"status": "affected",
"version": "4.1.5"
},
{
"status": "affected",
"version": "4.2.2"
},
{
"status": "affected",
"version": "4.2.X"
},
{
"status": "affected",
"version": "4.2.3"
},
{
"status": "affected",
"version": "4.2.4"
},
{
"status": "affected",
"version": "4.2.6"
},
{
"status": "affected",
"version": "4.1.6"
},
{
"status": "affected",
"version": "4.3.0"
},
{
"status": "affected",
"version": "4.3.1"
},
{
"status": "affected",
"version": "4.3.2"
},
{
"status": "affected",
"version": "4.3.3"
},
{
"status": "affected",
"version": "4.4.0"
},
{
"status": "affected",
"version": "4.4.1"
},
{
"status": "affected",
"version": "4.4.2"
},
{
"status": "affected",
"version": "4.4.3"
},
{
"status": "affected",
"version": "4.1.7"
},
{
"status": "affected",
"version": "5.0.0"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "5.0.2"
},
{
"status": "affected",
"version": "5.1.0"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1.3"
},
{
"status": "affected",
"version": "5.2.0"
},
{
"status": "affected",
"version": "5.2.1"
},
{
"status": "affected",
"version": "5.3.0"
},
{
"status": "affected",
"version": "5.3.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
}
]
}
],
"source": "psirt@cisco.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1FCDD0AB-B7FD-4D7B-8747-08156F987255",
"versionEndExcluding": "3.9.3.0",
"versionStartIncluding": "3.0.0-233",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3297323C-B263-45EA-90CE-2B8415C9E498",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "797AD8A4-083B-4A9E-A49D-65EE828E1637",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4EB16212-A9DC-4C8C-B220-9619C65436EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9C64043F-1F0D-47F7-AEEE-309B239891DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7605B088-A708-40D3-806B-D7E460AE53DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E1F7F871-C211-4DC6-8020-1075405BAE17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "30E42800-B7C9-4006-8B7A-5A9A5F5EB234",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE33F541-232E-4432-AB41-EC0500A85E6D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8D5B5FDC-79B2-447E-816F-1F630508A889",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B806EAC6-E1B2-40FB-9B2F-6AFB4A16AF89",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D7BAC55C-C114-4E64-BC9E-9000B8C016CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "925E6B9B-F7F1-4ED8-8431-282A1061B527",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A10EDC3E-0EF6-47DD-834D-51C5BBCC13EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "BB5F799E-6696-4391-9B58-06715FA4086A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:3.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "EE31D26B-CD47-4853-B1C3-2E50B0882AFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2758714C-4E9A-4442-9AD1-82D8E43995C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0F63C0E4-99A9-4D4F-BCF9-EF5F5455C04C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "13EA024C-97A4-4D33-BC3E-51DB77C51E76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "4A2224A9-96D6-4621-B3AD-D5E1C6884937",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D2B27A1F-E66D-4ADE-83B2-6D2457F49CC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "50511288-D7A4-4EAE-8238-1E899EF16A9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9115DF7D-68AD-4895-8F66-5AEA0170C9E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "664B4FF8-D812-4FAF-908E-0CD03EFBA995",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7951F3D5-D2CC-4655-9A0E-E47FD73031D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "61C467AA-7B57-4135-9E72-F161311633F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "016177C9-7AE6-496C-9D7A-54408F2DE743",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "D38383C7-2DEB-4E98-B26E-CD5315640B10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "93445A6B-48A4-4CF3-946C-A8EE2086F0FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9ACF81ED-42D2-4279-9E6B-623D1D9175ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "06668223-D683-4924-9640-79BDB75CB4CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "AEE4C398-9696-40CF-8274-80EC7B394BD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0D7D2281-5947-41B0-84E8-B24EF5A9D843",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "C74F60CB-C5FE-4519-87DF-8C3EF0CC2F9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4BECE10A-1391-42C2-BF3D-D24C22093EDF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "93ED93DC-AA9C-40B5-8D67-727A7E222A98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "82CD7BC5-4112-4A86-9CE3-F880CB1711EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "4969C7E5-045E-4627-B5A3-C11C2CEB0427",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EF58C035-28E4-42C6-9D63-ABDCC3C90505",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9507C011-EC7A-43D6-A3AB-573DADB9AEA9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EF70B046-C68A-410D-B18A-A0CA6FA2FC53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:4.4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "6D76A8B8-17A7-4739-9EF6-A0ED3DFC7EEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C848BB19-00F6-4B8B-9B99-6350A7A8489C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5AA87A5B-BAB9-44B6-8C87-8E6C6A404EBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4A93D27E-65A3-4968-A178-1F0DFDC164AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "59119742-BF8B-4793-937E-AAD187784CBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DB50A62C-0500-48AC-B94F-1D9736439686",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5020C7E8-BB50-4726-9C70-8B2468A43471",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "BABF1887-DB58-424D-BC80-0FB73C6E8E97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D19917B2-462C-414F-B796-90D3EFB49DB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6082C16F-6A4C-438F-98C9-774E2F621F2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DFB4DC3B-611B-42C1-94BB-B503CBC28056",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:cyber_vision:5.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "91EEA7DF-5B8C-4309-A34E-99B3D392CE82",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "237462A2-E0CF-4201-9115-D94910F9745B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2CA2F5B0-0106-4FF2-91BD-AEF3F064F69E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EF9FFE56-9A00-456E-B097-114F714133BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "0E253A08-B4D4-4E81-9D5A-C15D198C43AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "59C7F868-1571-44CC-90E1-7A5EA01E63FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7432B6F9-03CD-4373-B281-2A09864E7828",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3D42B7E6-71ED-48BA-B11F-6791FE96C1B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "39CC3AC6-6F75-43BF-BBC9-F74AADB74716",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FFBAC033-FF89-4581-92F6-EA4FFEE40F54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5AF3CB27-8315-452F-80E1-5DAF883319B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "7A910367-E5D5-4817-9DAA-3225D4FA8055",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "38EC17C6-2DA5-4E26-987A-FD14F539F55B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8:*:*:*:*:*:*:*",
"matchCriteriaId": "25E3D7DE-90EB-4531-BD7D-738637A83CD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4E7FE2B9-65C0-4F7F-8810-72BFE861C521",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.9:*:*:*:*:*:*:*",
"matchCriteriaId": "839E56CB-B466-4A38-A6E0-EBF27AA46315",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A90CFCD8-F873-4BEB-8193-97B62DB7FDA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10.2:*:*:*:*:*:*:*",
"matchCriteriaId": "677E2330-7FB5-4D91-9543-4941A8BE6A38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DD33999C-8DE7-4C0C-A8E5-1BA7127E36FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A977F379-2F93-4A56-B0A6-C45AEF274123",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DA7FA3B6-D630-42E3-B69F-B20D38B33531",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9B125CC4-0DAE-4C26-9A27-2532BB09EA8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5BC88149-095A-41DE-AA27-1CFD21125EF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BA983223-35AE-4D2F-B2F5-BA0614908C3B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17A31A33-2E84-4C79-86BD-1E9FF4C1DD09",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B58DC884-9430-49D4-AA8B-7FEB7505B7A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5EC075D4-0033-46ED-9E55-576997424382",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EA94FBB2-E095-48A3-BA39-5C2EC01D0ACA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D61D406F-6796-4E90-A954-285F6A3785AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "24DA7AE5-6288-4901-B9C9-36DF3788AA9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "55A60A76-D206-43B2-B6B1-94757FB3E258",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E91D9CAD-174A-4AAE-AB14-BD3110F9CFA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8EC515FD-4D9A-428D-9E72-9014C613A0E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5B53EBBB-8E55-4D94-ADD3-C93630E09241",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D9033AA9-2481-406A-8FBD-C671D3888D98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2F843EFD-0130-45F0-A212-9921879F3CBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "47EFC734-E450-4606-939A-86BE0F7FC5E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "814577AF-98E9-49A8-8F1C-BF938D4F1F29",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "8FC4D3D8-4391-4ED6-B27B-EF47C96904CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*",
"matchCriteriaId": "60AE1B18-3CEB-45B3-A43D-3C6DCC1F20F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9F4AA555-A8AD-4EF1-BDED-CCB550AA7560",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*",
"matchCriteriaId": "158ADFDB-D308-40AA-A445-BB9AF2F2414B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*",
"matchCriteriaId": "5F44916C-A0B3-40B1-B9E5-ACED3A0ECC80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*",
"matchCriteriaId": "A685AE11-0D19-4F98-B1A1-F40C66407A20",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*",
"matchCriteriaId": "8E0C23C5-4248-485F-8132-8459933EBDE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*",
"matchCriteriaId": "410D8A3B-CCD3-4BBC-BF03-63717B397E33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*",
"matchCriteriaId": "57D161E1-A275-44B1-AAC5-7A5207243A8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*",
"matchCriteriaId": "AB1C329A-CFA4-432C-926C-AD4EE14D30BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*",
"matchCriteriaId": "BAA951FD-37B6-4D5B-BC88-5FD6E1A670EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*",
"matchCriteriaId": "CD3F8898-782F-49DA-8FB4-625BCB08C267",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*",
"matchCriteriaId": "3D17AF21-1F77-425F-9DC0-42E4F82309C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "AA3E7D96-E406-4CB5-91FC-A0FD5D94A876",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "07AAFFE0-B85D-4A62-894B-20A05973CC5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "7842C05A-F9DE-49A7-8478-A1EF324C593D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*",
"matchCriteriaId": "9A6C2814-0DAC-40AF-9494-3EEA9429F603",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*",
"matchCriteriaId": "25A353E7-5F9E-4A94-BDA9-598C54572FEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*",
"matchCriteriaId": "70B8BACE-F390-402E-B80B-F57F473B1415",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*",
"matchCriteriaId": "7E984118-99E5-45BC-B238-E950E62E1A77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3825888B-D34F-466F-9E91-CBDE7A07B43C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*",
"matchCriteriaId": "2E88110E-78DE-4799-8F22-37E8B010DF81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "D1D5E95D-1CE2-472B-A4C6-E098B01BA3FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6D8E05E5-1957-44D0-BD34-45A9AB4782B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7AB3A273-B0E6-4659-91C4-77F0192EE1DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "2FFB4BE9-4CC8-49F2-851C-F4EA098BA3AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E8759E40-63D2-4FA4-9A40-CB330413798E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.\u0026nbsp;\r\n\u0026nbsp;\r\nThis vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition."
},
{
"lang": "es",
"value": "M\u00faltiples productos Cisco se ven afectados por una vulnerabilidad en la caracter\u00edstica de Visual Basic para Aplicaciones (VBA) de Snort 3 que podr\u00eda permitir a un atacante remoto no autenticado causar la ca\u00edda del motor de detecci\u00f3n de Snort 3.\n\nEsta vulnerabilidad se debe a la falta de una comprobaci\u00f3n de errores adecuada al descomprimir datos VBA. Un atacante podr\u00eda explotar esta vulnerabilidad enviando datos VBA manipulados al motor de detecci\u00f3n de Snort 3 en el dispositivo objetivo. Un exploit exitoso podr\u00eda permitir al atacante causar que el motor de detecci\u00f3n de Snort 3 se reinicie inesperadamente, provocando una condici\u00f3n de denegaci\u00f3n de servicio (DoS)."
}
],
"id": "CVE-2026-20057",
"lastModified": "2026-08-20T15:10:19.563",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "psirt@cisco.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-20057",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-04T21:32:36.004303Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-03-04T18:16:20.320",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory",
"Mitigation"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-369"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…