Read the docs
TI-2022-05244 Aliases CVE-2022-20685GHSA-5pj6-3hcq-wv78

Multiple Cisco Products Snort Modbus Denial of Service Vulnerability

Priority MEDIUM 42CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.

Summary

A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01456 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Cyber Vision3.0.0; 3.0.2; 3.0.3; 3.0.1; 3.1.0; 3.0.4; 3.1.1; 3.1.2; 3.2.0; 3.0.5; 3.2.1; 3.0.6; 3.2.2; 3.2.3; 3.2.4; 4.0.0; 4.0.1—No fix listedCNA
CiscoCisco Firepower Threat Defense Software6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; 6.2.3.1; 6.2.3.2; 6.4.0.5; 6.2.3.10; 6.4.0; 6.4.0.3; 6.2.3.6; 6.4.0.4; 6.2.3.15; 6.2.3.5; 6.2.3.4; 6.2.3.3; 6.2.3.8; 6.4.0.6; 6.2.3.11; 6.2.3.12; 6.2.3.13; 6.4.0.7; 6.4.0.8; 6.6.0; 6.4.0.9; 6.2.3.16; 6.6.0.1; 6.6.1; 6.4.0.10; 6.7.0; 6.4.0.11; 6.6.3; 6.7.0.1; 6.6.4; 6.4.0.12; 6.7.0.2; 7.0.0; 6.2.3.17; 7.0.0.1; 6.6.5; 6.2.3.18; 6.7.0.3—No fix listedCNA
CiscoCisco UTD SNORT IPS Engine Software3.17.1S; 16.12.3; Fuji-16.9.5; 16.12.4; 17.3.1a; 16.6.6; 16.12.2; Fuji-16.9.6; 3.17.0S; Fuji-16.9.3; Denali-16.3.7; Fuji-16.9.2; Fuji-16.9.4; Everest-16.6.4; Everest-16.6.3; 16.6.5; Denali-16.3.5; 17.2.1r; 17.1.1; Everest-16.6.2; 16.6.7a; Denali-16.3.4; 16.6.1; Denali-16.3.9; Denali-16.3.3; 16.12.1a; 17.3.2; 17.4.1a; 16.12.5; 17.5.1; Fuji-16.9.7; 16.6.9; 17.3.3; 17.5.1a; 17.3.4; 17.3.4a; 17.4.2; 17.4.1b; 17.6.1a; 16.6.10; 17.7.1a; 16.12.6; Fuji-16.9.8—No fix listedCNA
  • Cisco Cyber Vision VendorCisco Affected 3.0.0; 3.0.2; 3.0.3; 3.0.1; 3.1.0; 3.0.4; 3.1.1; 3.1.2; 3.2.0; 3.0.5; 3.2.1; 3.0.6; 3.2.2; 3.2.3; 3.2.4; 4.0.0; 4.0.1 Fixed in — No fix listed CNA
  • Cisco Firepower Threat Defense Software VendorCisco Affected 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; 6.2.3.1; 6.2.3.2; 6.4.0.5; 6.2.3.10; 6.4.0; 6.4.0.3; 6.2.3.6; 6.4.0.4; 6.2.3.15; 6.2.3.5; 6.2.3.4; 6.2.3.3; 6.2.3.8; 6.4.0.6; 6.2.3.11; 6.2.3.12; 6.2.3.13; 6.4.0.7; 6.4.0.8; 6.6.0; 6.4.0.9; 6.2.3.16; 6.6.0.1; 6.6.1; 6.4.0.10; 6.7.0; 6.4.0.11; 6.6.3; 6.7.0.1; 6.6.4; 6.4.0.12; 6.7.0.2; 7.0.0; 6.2.3.17; 7.0.0.1; 6.6.5; 6.2.3.18; 6.7.0.3 Fixed in — No fix listed CNA
  • Cisco UTD SNORT IPS Engine Software VendorCisco Affected 3.17.1S; 16.12.3; Fuji-16.9.5; 16.12.4; 17.3.1a; 16.6.6; 16.12.2; Fuji-16.9.6; 3.17.0S; Fuji-16.9.3; Denali-16.3.7; Fuji-16.9.2; Fuji-16.9.4; Everest-16.6.4; Everest-16.6.3; 16.6.5; Denali-16.3.5; 17.2.1r; 17.1.1; Everest-16.6.2; 16.6.7a; Denali-16.3.4; 16.6.1; Denali-16.3.9; Denali-16.3.3; 16.12.1a; 17.3.2; 17.4.1a; 16.12.5; 17.5.1; Fuji-16.9.7; 16.6.9; 17.3.3; 17.5.1a; 17.3.4; 17.3.4a; 17.4.2; 17.4.1b; 17.6.1a; 16.6.10; 17.7.1a; 16.12.6; Fuji-16.9.8 Fixed in — No fix listed CNA

CPE configurations NVD · 104

CPEVersionsRoleVendor
cpe:2.3:a:cisco:cyber_vision:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.0.4:*:*:*:*:*:*:*3.0.4VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.0.5:*:*:*:*:*:*:*3.0.5VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.0.6:*:*:*:*:*:*:*3.0.6VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableCisco
  • cpe:2.3:a:cisco:cyber_vision:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Cisco
Show 94 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:cyber_vision:3.2.0:*:*:*:*:*:*:*3.2.0VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.2.3:*:*:*:*:*:*:*3.2.3VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:3.2.4:*:*:*:*:*:*:*3.2.4VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableCisco
cpe:2.3:a:cisco:cyber_vision:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3:*:*:*:*:*:*:*6.2.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.1:*:*:*:*:*:*:*6.2.3.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.2:*:*:*:*:*:*:*6.2.3.2VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.3:*:*:*:*:*:*:*6.2.3.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.4:*:*:*:*:*:*:*6.2.3.4VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.5:*:*:*:*:*:*:*6.2.3.5VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.6:*:*:*:*:*:*:*6.2.3.6VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.7:*:*:*:*:*:*:*6.2.3.7VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.8:*:*:*:*:*:*:*6.2.3.8VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.9:*:*:*:*:*:*:*6.2.3.9VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.10:*:*:*:*:*:*:*6.2.3.10VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.11:*:*:*:*:*:*:*6.2.3.11VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.12:*:*:*:*:*:*:*6.2.3.12VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.13:*:*:*:*:*:*:*6.2.3.13VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.14:*:*:*:*:*:*:*6.2.3.14VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.15:*:*:*:*:*:*:*6.2.3.15VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.16:*:*:*:*:*:*:*6.2.3.16VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.17:*:*:*:*:*:*:*6.2.3.17VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.18:*:*:*:*:*:*:*6.2.3.18VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0:*:*:*:*:*:*:*6.4.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.1:*:*:*:*:*:*:*6.4.0.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.2:*:*:*:*:*:*:*6.4.0.2VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.3:*:*:*:*:*:*:*6.4.0.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.4:*:*:*:*:*:*:*6.4.0.4VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.5:*:*:*:*:*:*:*6.4.0.5VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.6:*:*:*:*:*:*:*6.4.0.6VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.7:*:*:*:*:*:*:*6.4.0.7VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.8:*:*:*:*:*:*:*6.4.0.8VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.9:*:*:*:*:*:*:*6.4.0.9VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.10:*:*:*:*:*:*:*6.4.0.10VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.11:*:*:*:*:*:*:*6.4.0.11VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.12:*:*:*:*:*:*:*6.4.0.12VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:*6.6.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:*:*:*:*:*:*:*6.6.0.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:*:*:*:*:*:*:*6.6.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:*:*:*:*:*:*:*6.6.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:*:*:*:*:*:*:*6.6.4VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:*:*:*:*:*:*:*6.6.5VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0:*:*:*:*:*:*:*6.7.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.1:*:*:*:*:*:*:*6.7.0.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.2:*:*:*:*:*:*:*6.7.0.2VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.3:*:*:*:*:*:*:*6.7.0.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0:*:*:*:*:*:*:*7.0.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0.1:*:*:*:*:*:*:*7.0.0.1VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:3.17.0s:*:*:*:*:*:*:*3.17.0sVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:3.17.1s:*:*:*:*:*:*:*3.17.1sVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.1:*:*:*:*:*:*:*16.6.1VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.5:*:*:*:*:*:*:*16.6.5VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.6:*:*:*:*:*:*:*16.6.6VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.7a:*:*:*:*:*:*:*16.6.7aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.9:*:*:*:*:*:*:*16.6.9VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.10:*:*:*:*:*:*:*16.6.10VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.1a:*:*:*:*:*:*:*16.12.1aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.2:*:*:*:*:*:*:*16.12.2VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.3:*:*:*:*:*:*:*16.12.3VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.4:*:*:*:*:*:*:*16.12.4VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.5:*:*:*:*:*:*:*16.12.5VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.6:*:*:*:*:*:*:*16.12.6VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.1.1:*:*:*:*:*:*:*17.1.1VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.2.1r:*:*:*:*:*:*:*17.2.1rVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.1a:*:*:*:*:*:*:*17.3.1aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.2:*:*:*:*:*:*:*17.3.2VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.3:*:*:*:*:*:*:*17.3.3VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4:*:*:*:*:*:*:*17.3.4VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4a:*:*:*:*:*:*:*17.3.4aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1a:*:*:*:*:*:*:*17.4.1aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1b:*:*:*:*:*:*:*17.4.1bVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.2:*:*:*:*:*:*:*17.4.2VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1:*:*:*:*:*:*:*17.5.1VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1a:*:*:*:*:*:*:*17.5.1aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.1a:*:*:*:*:*:*:*17.6.1aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.1a:*:*:*:*:*:*:*17.7.1aVulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.3:*:*:*:*:*:*:*denali-16.3.3VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.4:*:*:*:*:*:*:*denali-16.3.4VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.5:*:*:*:*:*:*:*denali-16.3.5VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.7:*:*:*:*:*:*:*denali-16.3.7VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.9:*:*:*:*:*:*:*denali-16.3.9VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:everest-16.6.2:*:*:*:*:*:*:*everest-16.6.2VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:everest-16.6.3:*:*:*:*:*:*:*everest-16.6.3VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:everest-16.6.4:*:*:*:*:*:*:*everest-16.6.4VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.2:*:*:*:*:*:*:*fuji-16.9.2VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.3:*:*:*:*:*:*:*fuji-16.9.3VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.4:*:*:*:*:*:*:*fuji-16.9.4VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.5:*:*:*:*:*:*:*fuji-16.9.5VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.6:*:*:*:*:*:*:*fuji-16.9.6VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.7:*:*:*:*:*:*:*fuji-16.9.7VulnerableCisco
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.8:*:*:*:*:*:*:*fuji-16.9.8VulnerableCisco
  • cpe:2.3:a:cisco:cyber_vision:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:cyber_vision:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3:*:*:*:*:*:*:* Versions 6.2.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.1:*:*:*:*:*:*:* Versions 6.2.3.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.2:*:*:*:*:*:*:* Versions 6.2.3.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.3:*:*:*:*:*:*:* Versions 6.2.3.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.4:*:*:*:*:*:*:* Versions 6.2.3.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.5:*:*:*:*:*:*:* Versions 6.2.3.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.6:*:*:*:*:*:*:* Versions 6.2.3.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.7:*:*:*:*:*:*:* Versions 6.2.3.7 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.8:*:*:*:*:*:*:* Versions 6.2.3.8 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.9:*:*:*:*:*:*:* Versions 6.2.3.9 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.10:*:*:*:*:*:*:* Versions 6.2.3.10 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.11:*:*:*:*:*:*:* Versions 6.2.3.11 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.12:*:*:*:*:*:*:* Versions 6.2.3.12 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.13:*:*:*:*:*:*:* Versions 6.2.3.13 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.14:*:*:*:*:*:*:* Versions 6.2.3.14 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.15:*:*:*:*:*:*:* Versions 6.2.3.15 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.16:*:*:*:*:*:*:* Versions 6.2.3.16 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.17:*:*:*:*:*:*:* Versions 6.2.3.17 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.18:*:*:*:*:*:*:* Versions 6.2.3.18 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0:*:*:*:*:*:*:* Versions 6.4.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.1:*:*:*:*:*:*:* Versions 6.4.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.2:*:*:*:*:*:*:* Versions 6.4.0.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.3:*:*:*:*:*:*:* Versions 6.4.0.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.4:*:*:*:*:*:*:* Versions 6.4.0.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.5:*:*:*:*:*:*:* Versions 6.4.0.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.6:*:*:*:*:*:*:* Versions 6.4.0.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.7:*:*:*:*:*:*:* Versions 6.4.0.7 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.8:*:*:*:*:*:*:* Versions 6.4.0.8 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.9:*:*:*:*:*:*:* Versions 6.4.0.9 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.10:*:*:*:*:*:*:* Versions 6.4.0.10 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.11:*:*:*:*:*:*:* Versions 6.4.0.11 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.12:*:*:*:*:*:*:* Versions 6.4.0.12 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:* Versions 6.6.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:*:*:*:*:*:*:* Versions 6.6.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:*:*:*:*:*:*:* Versions 6.6.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:*:*:*:*:*:*:* Versions 6.6.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:*:*:*:*:*:*:* Versions 6.6.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:*:*:*:*:*:*:* Versions 6.6.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0:*:*:*:*:*:*:* Versions 6.7.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.1:*:*:*:*:*:*:* Versions 6.7.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.2:*:*:*:*:*:*:* Versions 6.7.0.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.3:*:*:*:*:*:*:* Versions 6.7.0.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0.1:*:*:*:*:*:*:* Versions 7.0.0.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:3.17.0s:*:*:*:*:*:*:* Versions 3.17.0s Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:3.17.1s:*:*:*:*:*:*:* Versions 3.17.1s Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.1:*:*:*:*:*:*:* Versions 16.6.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.5:*:*:*:*:*:*:* Versions 16.6.5 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.6:*:*:*:*:*:*:* Versions 16.6.6 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.7a:*:*:*:*:*:*:* Versions 16.6.7a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.9:*:*:*:*:*:*:* Versions 16.6.9 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.6.10:*:*:*:*:*:*:* Versions 16.6.10 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.1a:*:*:*:*:*:*:* Versions 16.12.1a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.2:*:*:*:*:*:*:* Versions 16.12.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.3:*:*:*:*:*:*:* Versions 16.12.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.4:*:*:*:*:*:*:* Versions 16.12.4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.5:*:*:*:*:*:*:* Versions 16.12.5 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:16.12.6:*:*:*:*:*:*:* Versions 16.12.6 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.1.1:*:*:*:*:*:*:* Versions 17.1.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.2.1r:*:*:*:*:*:*:* Versions 17.2.1r Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.1a:*:*:*:*:*:*:* Versions 17.3.1a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.2:*:*:*:*:*:*:* Versions 17.3.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.3:*:*:*:*:*:*:* Versions 17.3.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4:*:*:*:*:*:*:* Versions 17.3.4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4a:*:*:*:*:*:*:* Versions 17.3.4a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1a:*:*:*:*:*:*:* Versions 17.4.1a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1b:*:*:*:*:*:*:* Versions 17.4.1b Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.2:*:*:*:*:*:*:* Versions 17.4.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1:*:*:*:*:*:*:* Versions 17.5.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1a:*:*:*:*:*:*:* Versions 17.5.1a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.1a:*:*:*:*:*:*:* Versions 17.6.1a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.1a:*:*:*:*:*:*:* Versions 17.7.1a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.3:*:*:*:*:*:*:* Versions denali-16.3.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.4:*:*:*:*:*:*:* Versions denali-16.3.4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.5:*:*:*:*:*:*:* Versions denali-16.3.5 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.7:*:*:*:*:*:*:* Versions denali-16.3.7 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:denali-16.3.9:*:*:*:*:*:*:* Versions denali-16.3.9 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:everest-16.6.2:*:*:*:*:*:*:* Versions everest-16.6.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:everest-16.6.3:*:*:*:*:*:*:* Versions everest-16.6.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:everest-16.6.4:*:*:*:*:*:*:* Versions everest-16.6.4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.2:*:*:*:*:*:*:* Versions fuji-16.9.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.3:*:*:*:*:*:*:* Versions fuji-16.9.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.4:*:*:*:*:*:*:* Versions fuji-16.9.4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.5:*:*:*:*:*:*:* Versions fuji-16.9.5 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.6:*:*:*:*:*:*:* Versions fuji-16.9.6 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.7:*:*:*:*:*:*:* Versions fuji-16.9.7 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:fuji-16.9.8:*:*:*:*:*:*:* Versions fuji-16.9.8 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-20685
  2. 2026-10-03 Alias added: GHSA-5pj6-3hcq-wv78

References

Advisory 1

Other 1

  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
  • TI-2026-16281 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability CVSS 3.1MEDIUM 5.8
  • TI-2026-16271 Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability CVSS 3.1MEDIUM 5.8
  • TI-2026-16268 Infinite loop in Cisco Cyber Vision CVSS 3.1MEDIUM 5.8
  • TI-2026-16224 Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine… CVSS 3.1MEDIUM 5.8
  • TI-2026-16282 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability CVSS 3.1MEDIUM 5.8
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences