CVE-2022-20685
HIGH EPSS 68.8%
Published Nov 15, 20241y ago · Modified Jun 17, 20261w ago
7.5 CVSS 3.1
Published Nov 15, 2024 1y ago
Last Modified Jun 17, 2026 1w ago
Description
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
68.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-190 Integer Overflow or Wraparound Numeric Error
Affected Products 104
| Vendor | Product | Version | Range |
|---|---|---|---|
| cisco | cyber_vision | 3.0.0 | any |
| cisco | cyber_vision | 3.0.1 | any |
| cisco | cyber_vision | 3.0.2 | any |
| cisco | cyber_vision | 3.0.3 | any |
| cisco | cyber_vision | 3.0.4 | any |
| cisco | cyber_vision | 3.0.5 | any |
| cisco | cyber_vision | 3.0.6 | any |
| cisco | cyber_vision | 3.1.0 | any |
| cisco | cyber_vision | 3.1.1 | any |
| cisco | cyber_vision | 3.1.2 | any |
| cisco | cyber_vision | 3.2.0 | any |
| cisco | cyber_vision | 3.2.1 | any |
| cisco | cyber_vision | 3.2.2 | any |
| cisco | cyber_vision | 3.2.3 | any |
| cisco | cyber_vision | 3.2.4 | any |
| cisco | cyber_vision | 4.0.0 | any |
| cisco | cyber_vision | 4.0.1 | any |
| cisco | firepower_threat_defense | 6.2.3 | any |
| cisco | firepower_threat_defense | 6.2.3.1 | any |
| cisco | firepower_threat_defense | 6.2.3.2 | any |
| cisco | firepower_threat_defense | 6.2.3.3 | any |
| cisco | firepower_threat_defense | 6.2.3.4 | any |
| cisco | firepower_threat_defense | 6.2.3.5 | any |
| cisco | firepower_threat_defense | 6.2.3.6 | any |
| cisco | firepower_threat_defense | 6.2.3.7 | any |
| cisco | firepower_threat_defense | 6.2.3.8 | any |
| cisco | firepower_threat_defense | 6.2.3.9 | any |
| cisco | firepower_threat_defense | 6.2.3.10 | any |
| cisco | firepower_threat_defense | 6.2.3.11 | any |
| cisco | firepower_threat_defense | 6.2.3.12 | any |
| cisco | firepower_threat_defense | 6.2.3.13 | any |
| cisco | firepower_threat_defense | 6.2.3.14 | any |
| cisco | firepower_threat_defense | 6.2.3.15 | any |
| cisco | firepower_threat_defense | 6.2.3.16 | any |
| cisco | firepower_threat_defense | 6.2.3.17 | any |
| cisco | firepower_threat_defense | 6.2.3.18 | any |
| cisco | firepower_threat_defense | 6.4.0 | any |
| cisco | firepower_threat_defense | 6.4.0.1 | any |
| cisco | firepower_threat_defense | 6.4.0.2 | any |
| cisco | firepower_threat_defense | 6.4.0.3 | any |
| cisco | firepower_threat_defense | 6.4.0.4 | any |
| cisco | firepower_threat_defense | 6.4.0.5 | any |
| cisco | firepower_threat_defense | 6.4.0.6 | any |
| cisco | firepower_threat_defense | 6.4.0.7 | any |
| cisco | firepower_threat_defense | 6.4.0.8 | any |
| cisco | firepower_threat_defense | 6.4.0.9 | any |
| cisco | firepower_threat_defense | 6.4.0.10 | any |
| cisco | firepower_threat_defense | 6.4.0.11 | any |
| cisco | firepower_threat_defense | 6.4.0.12 | any |
| cisco | firepower_threat_defense | 6.6.0 | any |
| cisco | firepower_threat_defense | 6.6.0.1 | any |
| cisco | firepower_threat_defense | 6.6.1 | any |
| cisco | firepower_threat_defense | 6.6.3 | any |
| cisco | firepower_threat_defense | 6.6.4 | any |
| cisco | firepower_threat_defense | 6.6.5 | any |
| cisco | firepower_threat_defense | 6.7.0 | any |
| cisco | firepower_threat_defense | 6.7.0.1 | any |
| cisco | firepower_threat_defense | 6.7.0.2 | any |
| cisco | firepower_threat_defense | 6.7.0.3 | any |
| cisco | firepower_threat_defense | 7.0.0 | any |
| cisco | firepower_threat_defense | 7.0.0.1 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 3.17.0s | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 3.17.1s | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.6.1 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.6.5 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.6.6 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.6.7a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.6.9 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.6.10 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.12.1a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.12.2 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.12.3 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.12.4 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.12.5 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 16.12.6 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.1.1 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.2.1r | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.3.1a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.3.2 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.3.3 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.3.4 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.3.4a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.4.1a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.4.1b | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.4.2 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.5.1 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.5.1a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.6.1a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.7.1a | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | denali-16.3.3 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | denali-16.3.4 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | denali-16.3.5 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | denali-16.3.7 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | denali-16.3.9 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | everest-16.6.2 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | everest-16.6.3 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | everest-16.6.4 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | fuji-16.9.2 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | fuji-16.9.3 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | fuji-16.9.4 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | fuji-16.9.5 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | fuji-16.9.6 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | fuji-16.9.7 | any |
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | fuji-16.9.8 | any |
References 2
- sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-xss-NXOxDhRQ
- sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-dos-9D3hJLuj
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.