The vulnerability of the Snort intrusion detection system, which includes Cisco Firepower Threat Defense (FTD) for microprogramming network firewalls, Cisco SD-WAN for programmatically defined networks, Cisco IOS XE for network operating systems, and Cisco Meraki for networking devices, allows attackers to bypass security measures and execute malicious activities.

🗓️ 19 Nov 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Flaw in Cisco Snort intrusion detection, Firepower Threat Defense, Software Defined Wide Area Network, Internetwork Operating System, and Meraki enables bypass via HTTP packets.

Reporter	Title	Published	Views	Family All 35
Cisco	Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability	21 Oct 202016:00	–	cisco
Tenable Nessus	Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass (cisco-sa-ftd-bypass-3eCfd24j)	30 Oct 202000:00	–	nessus
Tenable Nessus	Debian dla-3317 : snort - security update	11 Feb 202300:00	–	nessus
Tenable Nessus	Debian DSA-5354-1 : snort - security update	18 Feb 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-3299	10 Sep 202500:00	–	nessus
CVE	CVE-2020-3299	21 Oct 202018:25	–	cve
Cvelist	CVE-2020-3299 Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability	21 Oct 202018:25	–	cvelist
Debian	[SECURITY] [DLA 3317-1] snort security update	10 Feb 202323:23	–	debian
Debian	[SECURITY] [DSA 5354-1] snort security update	18 Feb 202316:38	–	debian
Debian CVE	CVE-2020-3299	21 Oct 202018:25	–	debiancve

Vulners

Node

cisco_systems firepower_threat_defenseRange6.0–6.3.0.1

cisco_systems cisco_meraki_mxRange14–14.53

cisco_systems snortRange<2.9.13.1

cisco_systems cisco_ios_xe_sd-wanRange16.10–16.10.3b

cisco_systems cisco_ios_xe_sd-wanRange16.12–16.12.1d

cisco_systems cisco_ios_xeRange16.9–16.9.5

cisco_systems cisco_ios_xeRange16.12–16.12.2

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-bypass-3eCfd24j
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2023 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25

CVSS 35.8

EPSS0.02279