Description
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Cisco / Cisco Cyber Vision3.0.0 – 3.0.0
- Cisco / Cisco Cyber Vision3.0.2 – 3.0.2
- Cisco / Cisco Cyber Vision3.0.3 – 3.0.3
- Cisco / Cisco Cyber Vision3.0.1 – 3.0.1
- Cisco / Cisco Cyber Vision3.1.0 – 3.1.0
- Cisco / Cisco Cyber Vision3.0.4 – 3.0.4
- Cisco / Cisco Cyber Vision3.1.1 – 3.1.1
- Cisco / Cisco Cyber Vision3.1.2 – 3.1.2
- Cisco / Cisco Cyber Vision3.2.0 – 3.2.0
- Cisco / Cisco Cyber Vision3.0.5 – 3.0.5
- Cisco / Cisco Cyber Vision3.2.1 – 3.2.1
- Cisco / Cisco Cyber Vision3.0.6 – 3.0.6
- Cisco / Cisco Cyber Vision3.2.2 – 3.2.2
- Cisco / Cisco Cyber Vision3.2.3 – 3.2.3
- Cisco / Cisco Cyber Vision3.2.4 – 3.2.4
- Cisco / Cisco Cyber Vision4.0.0 – 4.0.0
- Cisco / Cisco Cyber Vision4.0.1 – 4.0.1
- Cisco / Cisco Firepower Threat Defense Software6.2.3.14 – 6.2.3.14
- Cisco / Cisco Firepower Threat Defense Software6.4.0.1 – 6.4.0.1
- Cisco / Cisco Firepower Threat Defense Software6.2.3.7 – 6.2.3.7
- Cisco / Cisco Firepower Threat Defense Software6.2.3 – 6.2.3
- Cisco / Cisco Firepower Threat Defense Software6.4.0.2 – 6.4.0.2
- Cisco / Cisco Firepower Threat Defense Software6.2.3.9 – 6.2.3.9
- Cisco / Cisco Firepower Threat Defense Software6.2.3.1 – 6.2.3.1
- Cisco / Cisco Firepower Threat Defense Software6.2.3.2 – 6.2.3.2
- Cisco / Cisco Firepower Threat Defense Software6.4.0.5 – 6.4.0.5
- Cisco / Cisco Firepower Threat Defense Software6.2.3.10 – 6.2.3.10
- Cisco / Cisco Firepower Threat Defense Software6.4.0 – 6.4.0
- Cisco / Cisco Firepower Threat Defense Software6.4.0.3 – 6.4.0.3
- Cisco / Cisco Firepower Threat Defense Software6.2.3.6 – 6.2.3.6
- Cisco / Cisco Firepower Threat Defense Software6.4.0.4 – 6.4.0.4
- Cisco / Cisco Firepower Threat Defense Software6.2.3.15 – 6.2.3.15
- Cisco / Cisco Firepower Threat Defense Software6.2.3.5 – 6.2.3.5
- Cisco / Cisco Firepower Threat Defense Software6.2.3.4 – 6.2.3.4
- Cisco / Cisco Firepower Threat Defense Software6.2.3.3 – 6.2.3.3
- Cisco / Cisco Firepower Threat Defense Software6.2.3.8 – 6.2.3.8
- Cisco / Cisco Firepower Threat Defense Software6.4.0.6 – 6.4.0.6
- Cisco / Cisco Firepower Threat Defense Software6.2.3.11 – 6.2.3.11
- Cisco / Cisco Firepower Threat Defense Software6.2.3.12 – 6.2.3.12
- Cisco / Cisco Firepower Threat Defense Software6.2.3.13 – 6.2.3.13
- Cisco / Cisco Firepower Threat Defense Software6.4.0.7 – 6.4.0.7
- Cisco / Cisco Firepower Threat Defense Software6.4.0.8 – 6.4.0.8
- Cisco / Cisco Firepower Threat Defense Software6.6.0 – 6.6.0
- Cisco / Cisco Firepower Threat Defense Software6.4.0.9 – 6.4.0.9
- Cisco / Cisco Firepower Threat Defense Software6.2.3.16 – 6.2.3.16
- Cisco / Cisco Firepower Threat Defense Software6.6.0.1 – 6.6.0.1
- Cisco / Cisco Firepower Threat Defense Software6.6.1 – 6.6.1
- Cisco / Cisco Firepower Threat Defense Software6.4.0.10 – 6.4.0.10
- Cisco / Cisco Firepower Threat Defense Software6.7.0 – 6.7.0
- Cisco / Cisco Firepower Threat Defense Software6.4.0.11 – 6.4.0.11
- Cisco / Cisco Firepower Threat Defense Software6.6.3 – 6.6.3
- Cisco / Cisco Firepower Threat Defense Software6.7.0.1 – 6.7.0.1
- Cisco / Cisco Firepower Threat Defense Software6.6.4 – 6.6.4
- Cisco / Cisco Firepower Threat Defense Software6.4.0.12 – 6.4.0.12
- Cisco / Cisco Firepower Threat Defense Software6.7.0.2 – 6.7.0.2
- Cisco / Cisco Firepower Threat Defense Software7.0.0 – 7.0.0
- Cisco / Cisco Firepower Threat Defense Software6.2.3.17 – 6.2.3.17
- Cisco / Cisco Firepower Threat Defense Software7.0.0.1 – 7.0.0.1
- Cisco / Cisco Firepower Threat Defense Software6.6.5 – 6.6.5
- Cisco / Cisco Firepower Threat Defense Software6.2.3.18 – 6.2.3.18
- Cisco / Cisco Firepower Threat Defense Software6.7.0.3 – 6.7.0.3
- Cisco / Cisco UTD SNORT IPS Engine Software3.17.1S – 3.17.1S
- Cisco / Cisco UTD SNORT IPS Engine Software16.12.3 – 16.12.3
- Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.5 – Fuji-16.9.5
- Cisco / Cisco UTD SNORT IPS Engine Software16.12.4 – 16.12.4
- Cisco / Cisco UTD SNORT IPS Engine Software17.3.1a – 17.3.1a
- Cisco / Cisco UTD SNORT IPS Engine Software16.6.6 – 16.6.6
- Cisco / Cisco UTD SNORT IPS Engine Software16.12.2 – 16.12.2
- Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.6 – Fuji-16.9.6
- Cisco / Cisco UTD SNORT IPS Engine Software3.17.0S – 3.17.0S
- Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.3 – Fuji-16.9.3
- Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.7 – Denali-16.3.7
- Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.2 – Fuji-16.9.2
- Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.4 – Fuji-16.9.4
- Cisco / Cisco UTD SNORT IPS Engine SoftwareEverest-16.6.4 – Everest-16.6.4
- Cisco / Cisco UTD SNORT IPS Engine SoftwareEverest-16.6.3 – Everest-16.6.3
- Cisco / Cisco UTD SNORT IPS Engine Software16.6.5 – 16.6.5
- Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.5 – Denali-16.3.5
- Cisco / Cisco UTD SNORT IPS Engine Software17.2.1r – 17.2.1r
- Cisco / Cisco UTD SNORT IPS Engine Software17.1.1 – 17.1.1
- Cisco / Cisco UTD SNORT IPS Engine SoftwareEverest-16.6.2 – Everest-16.6.2
- Cisco / Cisco UTD SNORT IPS Engine Software16.6.7a – 16.6.7a
- Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.4 – Denali-16.3.4
- Cisco / Cisco UTD SNORT IPS Engine Software16.6.1 – 16.6.1
- Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.9 – Denali-16.3.9
- Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.3 – Denali-16.3.3
- Cisco / Cisco UTD SNORT IPS Engine Software16.12.1a – 16.12.1a
- Cisco / Cisco UTD SNORT IPS Engine Software17.3.2 – 17.3.2
- Cisco / Cisco UTD SNORT IPS Engine Software17.4.1a – 17.4.1a
- Cisco / Cisco UTD SNORT IPS Engine Software16.12.5 – 16.12.5
- Cisco / Cisco UTD SNORT IPS Engine Software17.5.1 – 17.5.1
- Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.7 – Fuji-16.9.7
- Cisco / Cisco UTD SNORT IPS Engine Software16.6.9 – 16.6.9
- Cisco / Cisco UTD SNORT IPS Engine Software17.3.3 – 17.3.3
- Cisco / Cisco UTD SNORT IPS Engine Software17.5.1a – 17.5.1a
- Cisco / Cisco UTD SNORT IPS Engine Software17.3.4 – 17.3.4
- Cisco / Cisco UTD SNORT IPS Engine Software17.3.4a – 17.3.4a
- Cisco / Cisco UTD SNORT IPS Engine Software17.4.2 – 17.4.2
- Cisco / Cisco UTD SNORT IPS Engine Software17.4.1b – 17.4.1b
- Cisco / Cisco UTD SNORT IPS Engine Software17.6.1a – 17.6.1a
- Cisco / Cisco UTD SNORT IPS Engine Software16.6.10 – 16.6.10
- Cisco / Cisco UTD SNORT IPS Engine Software17.7.1a – 17.7.1a
- Cisco / Cisco UTD SNORT IPS Engine Software16.12.6 – 16.12.6
- Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.8 – Fuji-16.9.8
- Cisco / cyber_vision3.2.1 – 3.2.1
- Cisco / cyber_vision3.2.2 – 3.2.2
- Cisco / cyber_vision3.2.3 – 3.2.3
- Cisco / cyber_vision3.2.4 – 3.2.4
- Cisco / cyber_vision4.0.0 – 4.0.0
- Cisco / cyber_vision4.0.1 – 4.0.1
- Cisco / cyber_vision3.0.0 – 3.0.0
- Cisco / cyber_vision3.0.1 – 3.0.1
- Cisco / cyber_vision3.0.2 – 3.0.2
- Cisco / cyber_vision3.0.3 – 3.0.3
- Cisco / cyber_vision3.0.4 – 3.0.4
- Cisco / cyber_vision3.0.5 – 3.0.5
- Cisco / cyber_vision3.0.6 – 3.0.6
- Cisco / cyber_vision3.1.0 – 3.1.0
- Cisco / cyber_vision3.1.1 – 3.1.1
- Cisco / cyber_vision3.1.2 – 3.1.2
- Cisco / cyber_vision3.2.0 – 3.2.0
- Cisco / secure_firewall_threat_defense6.2.3 – 6.2.3
- Cisco / secure_firewall_threat_defense6.2.3.1 – 6.2.3.1
- Cisco / secure_firewall_threat_defense6.2.3.2 – 6.2.3.2
- Cisco / secure_firewall_threat_defense6.2.3.3 – 6.2.3.3
- Cisco / secure_firewall_threat_defense6.2.3.4 – 6.2.3.4
- Cisco / secure_firewall_threat_defense6.2.3.5 – 6.2.3.5
- Cisco / secure_firewall_threat_defense6.2.3.6 – 6.2.3.6
- Cisco / secure_firewall_threat_defense6.2.3.7 – 6.2.3.7
- Cisco / secure_firewall_threat_defense6.2.3.8 – 6.2.3.8
- Cisco / secure_firewall_threat_defense6.2.3.9 – 6.2.3.9
- Cisco / secure_firewall_threat_defense6.2.3.10 – 6.2.3.10
- Cisco / secure_firewall_threat_defense6.2.3.11 – 6.2.3.11
- Cisco / secure_firewall_threat_defense6.2.3.12 – 6.2.3.12
- Cisco / secure_firewall_threat_defense6.2.3.13 – 6.2.3.13
- Cisco / secure_firewall_threat_defense6.2.3.14 – 6.2.3.14
- Cisco / secure_firewall_threat_defense6.2.3.15 – 6.2.3.15
- Cisco / secure_firewall_threat_defense6.2.3.16 – 6.2.3.16
- Cisco / secure_firewall_threat_defense6.2.3.17 – 6.2.3.17
- Cisco / secure_firewall_threat_defense6.2.3.18 – 6.2.3.18
- Cisco / secure_firewall_threat_defense6.4.0 – 6.4.0
- Cisco / secure_firewall_threat_defense6.4.0.1 – 6.4.0.1
- Cisco / secure_firewall_threat_defense6.4.0.2 – 6.4.0.2
- Cisco / secure_firewall_threat_defense6.4.0.3 – 6.4.0.3
- Cisco / secure_firewall_threat_defense6.4.0.4 – 6.4.0.4
- Cisco / secure_firewall_threat_defense6.4.0.5 – 6.4.0.5
- Cisco / secure_firewall_threat_defense6.4.0.6 – 6.4.0.6
- Cisco / secure_firewall_threat_defense6.4.0.7 – 6.4.0.7
- Cisco / secure_firewall_threat_defense6.4.0.8 – 6.4.0.8
- Cisco / secure_firewall_threat_defense6.4.0.9 – 6.4.0.9
- Cisco / secure_firewall_threat_defense6.4.0.10 – 6.4.0.10
- Cisco / secure_firewall_threat_defense6.4.0.11 – 6.4.0.11
- Cisco / secure_firewall_threat_defense6.4.0.12 – 6.4.0.12
- Cisco / secure_firewall_threat_defense6.6.0 – 6.6.0
- Cisco / secure_firewall_threat_defense6.6.0.1 – 6.6.0.1
- Cisco / secure_firewall_threat_defense6.6.1 – 6.6.1
- Cisco / secure_firewall_threat_defense6.6.3 – 6.6.3
- Cisco / secure_firewall_threat_defense6.6.4 – 6.6.4
- Cisco / secure_firewall_threat_defense6.6.5 – 6.6.5
- Cisco / secure_firewall_threat_defense6.7.0 – 6.7.0
- Cisco / secure_firewall_threat_defense6.7.0.1 – 6.7.0.1
- Cisco / secure_firewall_threat_defense6.7.0.2 – 6.7.0.2
- Cisco / secure_firewall_threat_defense6.7.0.3 – 6.7.0.3
- Cisco / secure_firewall_threat_defense7.0.0 – 7.0.0
- Cisco / secure_firewall_threat_defense7.0.0.1 – 7.0.0.1
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine3.17.0s – 3.17.0s
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine3.17.1s – 3.17.1s
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.6.1 – 16.6.1
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.6.5 – 16.6.5
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.6.6 – 16.6.6
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.6.7a – 16.6.7a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.6.9 – 16.6.9
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.6.10 – 16.6.10
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.12.1a – 16.12.1a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.12.2 – 16.12.2
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.12.3 – 16.12.3
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.12.4 – 16.12.4
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.12.5 – 16.12.5
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine16.12.6 – 16.12.6
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.1.1 – 17.1.1
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.2.1r – 17.2.1r
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.3.1a – 17.3.1a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.3.2 – 17.3.2
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.3.3 – 17.3.3
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.3.4 – 17.3.4
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.3.4a – 17.3.4a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.4.1a – 17.4.1a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.4.1b – 17.4.1b
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.4.2 – 17.4.2
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.5.1 – 17.5.1
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.5.1a – 17.5.1a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.6.1a – 17.6.1a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.7.1a – 17.7.1a
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginedenali-16.3.3 – denali-16.3.3
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginedenali-16.3.4 – denali-16.3.4
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginedenali-16.3.5 – denali-16.3.5
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginedenali-16.3.7 – denali-16.3.7
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginedenali-16.3.9 – denali-16.3.9
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engineeverest-16.6.2 – everest-16.6.2
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engineeverest-16.6.3 – everest-16.6.3
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_engineeverest-16.6.4 – everest-16.6.4
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginefuji-16.9.2 – fuji-16.9.2
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginefuji-16.9.3 – fuji-16.9.3
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginefuji-16.9.4 – fuji-16.9.4
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginefuji-16.9.5 – fuji-16.9.5
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginefuji-16.9.6 – fuji-16.9.6
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginefuji-16.9.7 – fuji-16.9.7
- Cisco / unified_threat_defense_snort_intrusion_prevention_system_enginefuji-16.9.8 – fuji-16.9.8
Updated 8m ago · 8 sources