The vulnerability of the Cisco Unified Threat Defense Snort Intrusion Prevention System Engine’s operating system, Cisco IOS XE, related to the operation of data out of the buffer in memory. This allows attackers to bypass existing security restrictions and trigger a service failure.

🗓️ 13 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Buffer overrun in Cisco Internetwork Operating System XE Snort intrusion prevention engine lets attackers bypass protections and crash the service via crafted web request.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-20508	25 Sep 202420:13	–	circl
Cisco	Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability	25 Sep 202416:00	–	cisco
Tenable Nessus	Cisco IOS XE Software Unified Threat Defense Snort Intrusion Prevention System Engine for Security Policy Bypass DoS (cisco-sa-utd-snort3-dos-bypas-b4OUEwxD)	3 Oct 202400:00	–	nessus
CNNVD	Cisco IOS XE Software 安全漏洞	25 Sep 202400:00	–	cnnvd
CVE	CVE-2024-20508	25 Sep 202416:19	–	cve
Cvelist	CVE-2024-20508 Cisco UTD Snort IPS Engine Software for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability	25 Sep 202416:19	–	cvelist
EUVD	EUVD-2024-18223	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20508	25 Sep 202417:15	–	nvd
OSV	CVE-2024-20508	25 Sep 202417:15	–	osv
Positive Technologies	PT-2023-9658 · Cisco · Cisco Ios Xe +1	8 Nov 202300:00	–	ptsecurity

Vulners

Node

cisco_systems cisco_unified_threat_defense_snort_intrusion_prevention_system_engineRange17.12–17.12.4

cisco_systems cisco_unified_threat_defense_snort_intrusion_prevention_system_engineRange17.13–17.14

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-utd-snort3-dos-bypas-b4OUEwxD
vuldb	www.vuldb.com/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Nov 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.4

CVSS 36.5

EPSS0.00026