Skip to content
OpenAdvisories
Medium WID-SEC-2023-0339 3 CVEs

Snort: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Jan 13, 2021 · Updated Feb 19, 2023 · Revision 3 · de-DE

Vendor: Cisco Vendor: Debian Product: Firepower Threat Defense Product: Linux Product: Router Product: Router Cloud Services Router 1000V Product: Router Integrated Services Virtual Router Product: Router ISR 1000 Series Product: Router ISR 3000 Series Product: Router ISR 4000 Series

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Snort und verschiedenen Cisco Produkten ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Snort ist ein freies Network Intrusion Prevention System (NIPS) und ein Network Intrusion Detection System (NIDS) der Firma Sourcefire.
Router sind Geräte aus dem Bereich Computernetzwerke, Telekommunikation und Internet, die mehrere Rechnernetze miteinander verbinden.
Firepower ist eine Firewall-Plattform von Cisco

Vulnerabilities 3

  • Medium 5.8
    CVE-2021-1223

    Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability

    Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of an HTTP range header. An …

    Cisco Cisco Firepower Threat Defense Software snort Network devices Ubuntu
  • Medium 5.8
    CVE-2021-1224

    Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability

    Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is du…

    Cisco Cisco Firepower Threat Defense Software snort Network devices Ubuntu
  • Medium 4.0
    CVE-2021-1236

    Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability

    Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection…

    Cisco Cisco Firepower Threat Defense Software snort Network devices Ubuntu

Revision history

  1. #3

    Neue Updates von Debian aufgenommen

  2. #2

    Neue Updates von Debian aufgenommen

  3. #1

    Initiale Fassung

References