CVE-2020-3315

🗓️ 06 May 2020 16:40:42Reported by ciscoType

Cisco products vulnerability in Snort engine allows remote attackers to bypass file policie

Reporter	Title	Published	Views	Family All 35
Tenable Nessus	Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass (cisco-sa-snort_filepolbypass-m4X5DgOP)	4 Sep 202000:00	–	nessus
Tenable Nessus	Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass (cisco-sa-snort_filepolbypass-m4X5DgOP)	4 Sep 202000:00	–	nessus
Tenable Nessus	Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass (cisco-sa-snort_filepolbypass-m4X5DgOP)	4 Sep 202000:00	–	nessus
Tenable Nessus	Debian dla-3317 : snort - security update	11 Feb 202300:00	–	nessus
Tenable Nessus	Debian DSA-5354-1 : snort - security update	18 Feb 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-3315	10 Sep 202500:00	–	nessus
Cisco	Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability	6 May 202016:00	–	cisco
CNVD	Multiple Cisco Product Policy Bypass Vulnerabilities	7 May 202000:00	–	cnvd
Cvelist	CVE-2020-3315 Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability	6 May 202016:40	–	cvelist
Debian	[SECURITY] [DLA 3317-1] snort security update	10 Feb 202323:23	–	debian

NVD

Node

cisco firepower_threat_defenseRange<6.6.0

cisco secure_firewall_management_centerMatch2.9.14.4

cisco secure_firewall_management_centerMatch2.9.15

cisco secure_firewall_management_centerMatch2.9.16

Node

cisco iosMatch15.2(7)e

cisco iosMatch16.11.2

cisco iosMatch17.3.1

AND

cisco 1100-4g_integrated_services_routerMatch-

cisco 1100-6g_integrated_services_routerMatch-

cisco 1100-lte_integrated_services_routerMatch-

cisco 1101_integrated_services_routerMatch-

cisco 1109_integrated_services_routerMatch-

cisco 1111x_integrated_services_routerMatch-

cisco 111x_integrated_services_routerMatch-

cisco 1120_integrated_services_routerMatch-

cisco 1160_integrated_services_routerMatch-

cisco 4221_integrated_services_routerMatch-

cisco 4331_integrated_services_routerMatch-

cisco 4431_integrated_services_routerMatch-

cisco 4461_integrated_services_routerMatch-

cisco csr1000vMatch-

cisco isa-3000-2c2f-k9Match-

cisco isa-3000-4c-k9Match-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Firepower Threat Defense Software",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2023/dsa-5354
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort_filepolbypass-m4X5DgOP
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00011.html

26 Nov 2024 16:09Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25

CVSS 3.15.3

CVSS 35.8

EPSS0.01101

SSVC