CVE-2026-20011: fallo de gravedad media en Cisco Open Source Snort3
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear Cisco Secure Firewall Threat Defense+ Monitorear Cisco UTD SNORT IPS Engine
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.8epss 0.5%
Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart.
This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed. An attacker could exploit this vulnerability by sending crafted SMTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Productos afectados
Cisco · Cisco Open Source Snort3Cisco · Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco · Cisco UTD SNORT IPS Engine SoftwareCVEs relacionadas — Cisco Open Source Snort3
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-20362MEDIUMCVE-2025-20362EPSS 86.7%KEVCVE-2025-20333CRITICALCVE-2025-20333EPSS 72.0%KEVCVE-2026-20349HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityEPSS 1.0%KEVCVE-2026-76418HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityEPSS 0.8%KEVCVE-2021-1285HIGHMultiple Cisco Products SNORT Ethernet Frame Decoder Denial of Service VulnerabilityEPSS 2.9%CVE-2022-20685HIGHMultiple Cisco Products Snort Modbus Denial of Service VulnerabilityEPSS 1.5%