CVE-2024-20363 (CNNVD-202405-4188)
中文标题:
Cisco 多款产品安全漏洞
英文标题:
Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IP...
漏洞描述
中文描述:
Cisco Firepower Threat Defense（FTD）和Cisco IOS XE Software都是美国思科（Cisco）公司的产品。Cisco Firepower Threat Defense是一套提供下一代防火墙服务的统一软件。Cisco IOS XE Software是一个操作系统。用于企业有线和无线访问，汇聚，核心和WAN的单一操作系统，Cisco IOS XE降低了业务和网络的复杂性。 Cisco多个产品存在安全漏洞，该漏洞源于HTTP数据包处理不正确，攻击者可以绕过配置的IPS规则并允许未经检查的流量进入网络。以下产品和版本受到影响：Open Source Snort 3、Cisco Firepower Threat Defense Software和Cisco IOS XE Software。
英文描述:
Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet handling. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Firepower Threat Defense Software | 7.4.0 | - | - |
cpe:2.3:a:cisco:cisco_firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*
|
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.4 | - | - |
cpe:2.3:a:cisco:cisco_utd_snort_ips_engine_software:17.6.4:*:*:*:*:*:*:*
|
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.5 | - | - |
cpe:2.3:a:cisco:cisco_utd_snort_ips_engine_software:17.6.5:*:*:*:*:*:*:*
|
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.1a | - | - |
cpe:2.3:a:cisco:cisco_utd_snort_ips_engine_software:17.12.1a:*:*:*:*:*:*:*
|
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.2 | - | - |
cpe:2.3:a:cisco:cisco_utd_snort_ips_engine_software:17.12.2:*:*:*:*:*:*:*
|
| cisco | firepower_threat_defense | 7.4.0 | - | - |
cpe:2.3:a:cisco:firepower_threat_defense:7.4.0:*:*:*:*:*:*:*
|
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.6.4 | - | - |
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.4:*:*:*:*:*:*:*
|
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.6.5 | - | - |
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.5:*:*:*:*:*:*:*
|
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.12.1a | - | - |
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*
|
| cisco | unified_threat_defense_snort_intrusion_prevention_system_engine | 17.12.2 | - | - |
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*
|
| cisco | snort | * | - | - |
cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2024-20363 |
2025-11-11 15:22:24 | 2025-11-11 07:39:03 |
| NVD | nvd_CVE-2024-20363 |
2025-11-11 14:59:55 | 2025-11-11 07:47:05 |
| CNNVD | cnnvd_CNNVD-202405-4188 |
2025-11-11 15:11:38 | 2025-11-11 07:58:49 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202405-4188
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 5 -> 11
- data_sources: ['cve'] -> ['cve', 'nvd']