CVE-2026-20057

Description

Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.    This vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition.

CVSS breakdown

Affected products

• Cisco / Cisco Cyber Vision3.0.0 – 3.0.0
• Cisco / Cisco Cyber Vision5.1.3 – 5.1.3
• Cisco / Cisco Cyber Vision3.0.2 – 3.0.2
• Cisco / Cisco Cyber Vision3.0.3 – 3.0.3
• Cisco / Cisco Cyber Vision3.0.1 – 3.0.1
• Cisco / Cisco Cyber Vision3.1.0 – 3.1.0
• Cisco / Cisco Cyber Vision3.0.4 – 3.0.4
• Cisco / Cisco Cyber Vision3.1.1 – 3.1.1
• Cisco / Cisco Cyber Vision3.1.2 – 3.1.2
• Cisco / Cisco Cyber Vision3.2.0 – 3.2.0
• Cisco / Cisco Cyber Vision3.0.5 – 3.0.5
• Cisco / Cisco Cyber Vision3.2.1 – 3.2.1
• Cisco / Cisco Cyber Vision3.0.6 – 3.0.6
• Cisco / Cisco Cyber Vision3.2.2 – 3.2.2
• Cisco / Cisco Cyber Vision3.2.3 – 3.2.3
• Cisco / Cisco Cyber Vision3.2.4 – 3.2.4
• Cisco / Cisco Cyber Vision4.0.0 – 4.0.0
• Cisco / Cisco Cyber Vision4.0.1 – 4.0.1
• Cisco / Cisco Cyber Vision4.0.2 – 4.0.2
• Cisco / Cisco Cyber Vision4.0.3 – 4.0.3
• Cisco / Cisco Cyber Vision4.1.0 – 4.1.0
• Cisco / Cisco Cyber Vision4.1.1 – 4.1.1
• Cisco / Cisco Cyber Vision4.1.2 – 4.1.2
• Cisco / Cisco Cyber Vision4.1.3 – 4.1.3
• Cisco / Cisco Cyber Vision4.1.4 – 4.1.4
• Cisco / Cisco Cyber Vision4.2.0 – 4.2.0
• Cisco / Cisco Cyber Vision4.2.1 – 4.2.1
• Cisco / Cisco Cyber Vision4.1.5 – 4.1.5
• Cisco / Cisco Cyber Vision4.2.2 – 4.2.2
• Cisco / Cisco Cyber Vision4.2.X – 4.2.X
• Cisco / Cisco Cyber Vision4.2.3 – 4.2.3
• Cisco / Cisco Cyber Vision4.2.4 – 4.2.4
• Cisco / Cisco Cyber Vision4.2.6 – 4.2.6
• Cisco / Cisco Cyber Vision4.1.6 – 4.1.6
• Cisco / Cisco Cyber Vision4.3.0 – 4.3.0
• Cisco / Cisco Cyber Vision4.3.1 – 4.3.1
• Cisco / Cisco Cyber Vision4.3.2 – 4.3.2
• Cisco / Cisco Cyber Vision4.3.3 – 4.3.3
• Cisco / Cisco Cyber Vision4.4.0 – 4.4.0
• Cisco / Cisco Cyber Vision4.4.1 – 4.4.1
• Cisco / Cisco Cyber Vision4.4.2 – 4.4.2
• Cisco / Cisco Cyber Vision4.4.3 – 4.4.3
• Cisco / Cisco Cyber Vision4.1.7 – 4.1.7
• Cisco / Cisco Cyber Vision5.0.0 – 5.0.0
• Cisco / Cisco Cyber Vision5.0.1 – 5.0.1
• Cisco / Cisco Cyber Vision5.0.2 – 5.0.2
• Cisco / Cisco Cyber Vision5.1.0 – 5.1.0
• Cisco / Cisco Cyber Vision5.1.1 – 5.1.1
• Cisco / Cisco Cyber Vision5.1.2 – 5.1.2
• Cisco / Cisco Cyber Vision5.2.0 – 5.2.0
• Cisco / Cisco Cyber Vision5.2.1 – 5.2.1
• Cisco / Cisco Cyber Vision5.3.0 – 5.3.0
• Cisco / Cisco Cyber Vision5.3.1 – 5.3.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.0 – 7.2.0
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.0.1 – 7.2.0.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.1 – 7.2.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.3.0 – 7.3.0
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.2 – 7.2.2
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.3 – 7.2.3
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.3.1 – 7.3.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.4 – 7.2.4
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.5 – 7.2.5
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.4.1 – 7.2.4.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.3.1.1 – 7.3.1.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.0 – 7.4.0
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.5.1 – 7.2.5.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.1 – 7.4.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.6 – 7.2.6
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.1.1 – 7.4.1.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.7 – 7.2.7
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.5.2 – 7.2.5.2
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.3.1.2 – 7.3.1.2
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.8 – 7.2.8
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.6.0 – 7.6.0
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.2 – 7.4.2
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.8.1 – 7.2.8.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.2.1 – 7.4.2.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.9 – 7.2.9
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.7.0 – 7.7.0
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.2.2 – 7.4.2.2
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.10 – 7.2.10
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.6.1 – 7.6.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.2.3 – 7.4.2.3
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.6.2 – 7.6.2
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.7.10 – 7.7.10
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.6.2.1 – 7.6.2.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.7.10.1 – 7.7.10.1
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.2.4 – 7.4.2.4
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.2.10.2 – 7.2.10.2
• Cisco / Cisco Secure Firewall Threat Defense (FTD) Software7.4.3 – 7.4.3
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.1a – 17.12.1a
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.2 – 17.12.2
• Cisco / Cisco UTD SNORT IPS Engine Software17.13.1a – 17.13.1a
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.3 – 17.12.3
• Cisco / Cisco UTD SNORT IPS Engine Software17.14.1a – 17.14.1a
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.4 – 17.12.4
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.3a – 17.12.3a
• Cisco / Cisco UTD SNORT IPS Engine Software17.15.1a – 17.15.1a
• Cisco / Cisco UTD SNORT IPS Engine Software17.16.1a – 17.16.1a
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.4a – 17.12.4a
• Cisco / Cisco UTD SNORT IPS Engine Software17.15.2c – 17.15.2c
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.4b – 17.12.4b
• Cisco / Cisco UTD SNORT IPS Engine Software17.15.2a – 17.15.2a
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.5 – 17.12.5
• Cisco / Cisco UTD SNORT IPS Engine Software17.17.1 – 17.17.1
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.5a – 17.12.5a
• Cisco / Cisco UTD SNORT IPS Engine Software17.15.3a – 17.15.3a
• Cisco / Cisco UTD SNORT IPS Engine Software17.15.3 – 17.15.3
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.5b – 17.12.5b
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.5c – 17.12.5c
• Cisco / Cisco UTD SNORT IPS Engine Software17.15.4 – 17.15.4
• Cisco / Cisco UTD SNORT IPS Engine Software17.18.1 – 17.18.1
• Cisco / Cisco UTD SNORT IPS Engine Software17.18.1a – 17.18.1a
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.6 – 17.12.6
• Cisco / Cisco UTD SNORT IPS Engine Software17.15.4c – 17.15.4c
• Cisco / Cisco UTD SNORT IPS Engine Software17.12.5d – 17.12.5d
• Cisco / Cisco UTD SNORT IPS Engine Software17.18.2 – 17.18.2
• Cisco / cyber_vision4.2.1 – 4.2.1
• Cisco / cyber_vision3.2.0 – 3.2.0
• Cisco / cyber_vision3.0.0 – 3.0.0
• Cisco / cyber_vision3.0.1 – 3.0.1
• Cisco / cyber_vision3.0.2 – 3.0.2
• Cisco / cyber_vision3.0.3 – 3.0.3
• Cisco / cyber_vision3.0.4 – 3.0.4
• Cisco / cyber_vision3.0.5 – 3.0.5
• Cisco / cyber_vision3.0.6 – 3.0.6
• Cisco / cyber_vision3.1.0 – 3.1.0
• Cisco / cyber_vision3.1.1 – 3.1.1
• Cisco / cyber_vision3.1.2 – 3.1.2
• Cisco / cyber_vision3.2.1 – 3.2.1
• Cisco / cyber_vision3.2.2 – 3.2.2
• Cisco / cyber_vision3.2.3 – 3.2.3
• Cisco / cyber_vision3.2.4 – 3.2.4
• Cisco / cyber_vision4.0.0 – 4.0.0
• Cisco / cyber_vision4.0.1 – 4.0.1
• Cisco / cyber_vision4.0.2 – 4.0.2
• Cisco / cyber_vision4.0.3 – 4.0.3
• Cisco / cyber_vision4.1.0 – 4.1.0
• Cisco / cyber_vision4.1.1 – 4.1.1
• Cisco / cyber_vision4.1.2 – 4.1.2
• Cisco / cyber_vision4.1.3 – 4.1.3
• Cisco / cyber_vision4.1.4 – 4.1.4
• Cisco / cyber_vision4.1.5 – 4.1.5
• Cisco / cyber_vision4.1.6 – 4.1.6
• Cisco / cyber_vision4.1.7 – 4.1.7
• Cisco / cyber_vision4.2.0 – 4.2.0
• Cisco / cyber_vision4.2.2 – 4.2.2
• Cisco / cyber_vision4.2.3 – 4.2.3
• Cisco / cyber_vision4.2.4 – 4.2.4
• Cisco / cyber_vision4.2.6 – 4.2.6
• Cisco / cyber_vision4.3.0 – 4.3.0
• Cisco / cyber_vision4.3.1 – 4.3.1
• Cisco / cyber_vision4.3.2 – 4.3.2
• Cisco / cyber_vision4.3.3 – 4.3.3
• Cisco / cyber_vision4.4.0 – 4.4.0
• Cisco / cyber_vision4.4.1 – 4.4.1
• Cisco / cyber_vision4.4.2 – 4.4.2
• Cisco / cyber_vision4.4.3 – 4.4.3
• Cisco / cyber_vision5.0.0 – 5.0.0
• Cisco / cyber_vision5.0.1 – 5.0.1
• Cisco / cyber_vision5.0.2 – 5.0.2
• Cisco / cyber_vision5.1.0 – 5.1.0
• Cisco / cyber_vision5.1.1 – 5.1.1
• Cisco / cyber_vision5.1.2 – 5.1.2
• Cisco / cyber_vision5.1.3 – 5.1.3
• Cisco / cyber_vision5.2.0 – 5.2.0
• Cisco / cyber_vision5.2.1 – 5.2.1
• Cisco / cyber_vision5.3.0 – 5.3.0
• Cisco / cyber_vision5.3.1 – 5.3.1
• Cisco / secure_firewall_threat_defense7.2.10 – 7.2.10
• Cisco / secure_firewall_threat_defense7.2.0 – 7.2.0
• Cisco / secure_firewall_threat_defense7.2.0.1 – 7.2.0.1
• Cisco / secure_firewall_threat_defense7.2.1 – 7.2.1
• Cisco / secure_firewall_threat_defense7.2.2 – 7.2.2
• Cisco / secure_firewall_threat_defense7.2.3 – 7.2.3
• Cisco / secure_firewall_threat_defense7.2.4 – 7.2.4
• Cisco / secure_firewall_threat_defense7.2.4.1 – 7.2.4.1
• Cisco / secure_firewall_threat_defense7.2.5 – 7.2.5
• Cisco / secure_firewall_threat_defense7.2.5.1 – 7.2.5.1
• Cisco / secure_firewall_threat_defense7.2.5.2 – 7.2.5.2
• Cisco / secure_firewall_threat_defense7.2.6 – 7.2.6
• Cisco / secure_firewall_threat_defense7.2.7 – 7.2.7
• Cisco / secure_firewall_threat_defense7.2.8 – 7.2.8
• Cisco / secure_firewall_threat_defense7.2.8.1 – 7.2.8.1
• Cisco / secure_firewall_threat_defense7.2.9 – 7.2.9
• Cisco / secure_firewall_threat_defense7.2.10.2 – 7.2.10.2
• Cisco / secure_firewall_threat_defense7.3.0 – 7.3.0
• Cisco / secure_firewall_threat_defense7.3.1 – 7.3.1
• Cisco / secure_firewall_threat_defense7.3.1.1 – 7.3.1.1
• Cisco / secure_firewall_threat_defense7.3.1.2 – 7.3.1.2
• Cisco / secure_firewall_threat_defense7.4.0 – 7.4.0
• Cisco / secure_firewall_threat_defense7.4.1 – 7.4.1
• Cisco / secure_firewall_threat_defense7.4.1.1 – 7.4.1.1
• Cisco / secure_firewall_threat_defense7.4.2 – 7.4.2
• Cisco / secure_firewall_threat_defense7.4.2.1 – 7.4.2.1
• Cisco / secure_firewall_threat_defense7.4.2.2 – 7.4.2.2
• Cisco / secure_firewall_threat_defense7.4.2.3 – 7.4.2.3
• Cisco / secure_firewall_threat_defense7.4.2.4 – 7.4.2.4
• Cisco / secure_firewall_threat_defense7.4.3 – 7.4.3
• Cisco / secure_firewall_threat_defense7.6.0 – 7.6.0
• Cisco / secure_firewall_threat_defense7.6.1 – 7.6.1
• Cisco / secure_firewall_threat_defense7.6.2 – 7.6.2
• Cisco / secure_firewall_threat_defense7.6.2.1 – 7.6.2.1
• Cisco / secure_firewall_threat_defense7.7.0 – 7.7.0
• Cisco / secure_firewall_threat_defense7.7.10 – 7.7.10
• Cisco / secure_firewall_threat_defense7.7.10.1 – 7.7.10.1
• Cisco / snort3.0.0-233 – 3.9.3.0
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.1a – 17.12.1a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.2 – 17.12.2
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.3 – 17.12.3
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.3a – 17.12.3a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.4 – 17.12.4
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.18.2 – 17.18.2
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.4a – 17.12.4a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.4b – 17.12.4b
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.5 – 17.12.5
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.5a – 17.12.5a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.5b – 17.12.5b
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.5c – 17.12.5c
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.5d – 17.12.5d
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.12.6 – 17.12.6
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.13.1a – 17.13.1a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.14.1a – 17.14.1a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.15.1a – 17.15.1a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.15.2a – 17.15.2a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.15.2c – 17.15.2c
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.15.3 – 17.15.3
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.15.3a – 17.15.3a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.15.4 – 17.15.4
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.15.4c – 17.15.4c
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.16.1a – 17.16.1a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.17.1 – 17.17.1
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.18.1a – 17.18.1a
• Cisco / unified_threat_defense_snort_intrusion_prevention_system_engine17.18.1 – 17.18.1

References

• VENDOR_ADVISORYhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed