CVE-2022-20685

Published: Nov 15, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: psirt@cisco.com (Secondary)

Description

A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected (104)

Products: Cisco: Cyber Vision, Firepower Threat Defense, Unified Threat Defense Snort Intrusion Prevention System Engine

Cisco

3 products

Cyber Vision

Firepower Threat Defense

Unified Threat Defense Snort Intrusion Prevention System Engine

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Cisco Cyber Vision	Version 3.0.0
Cisco Cyber Vision	Version 3.0.1
Cisco Cyber Vision	Version 3.0.2
Cisco Cyber Vision	Version 3.0.3
Cisco Cyber Vision	Version 3.0.4
Cisco Cyber Vision	Version 3.0.5
Cisco Cyber Vision	Version 3.0.6
Cisco Cyber Vision	Version 3.1.0
Cisco Cyber Vision	Version 3.1.1
Cisco Cyber Vision	Version 3.1.2
Cisco Cyber Vision	Version 3.2.0
Cisco Cyber Vision	Version 3.2.1
Cisco Cyber Vision	Version 3.2.2
Cisco Cyber Vision	Version 3.2.3
Cisco Cyber Vision	Version 3.2.4
Cisco Cyber Vision	Version 4.0.0
Cisco Cyber Vision	Version 4.0.1

Configuration B

44 vulnerable

Vulnerable Software	Affected Versions
Cisco Firepower Threat Defense	Version 6.2.3.10
Cisco Firepower Threat Defense	Version 6.2.3.11
Cisco Firepower Threat Defense	Version 6.2.3.12
Cisco Firepower Threat Defense	Version 6.2.3.13
Cisco Firepower Threat Defense	Version 6.2.3.14
Cisco Firepower Threat Defense	Version 6.2.3.15
Cisco Firepower Threat Defense	Version 6.2.3.16
Cisco Firepower Threat Defense	Version 6.2.3.17
Cisco Firepower Threat Defense	Version 6.2.3.18
Cisco Firepower Threat Defense	Version 6.2.3.1
Cisco Firepower Threat Defense	Version 6.2.3.2
Cisco Firepower Threat Defense	Version 6.2.3.3
Cisco Firepower Threat Defense	Version 6.2.3.4
Cisco Firepower Threat Defense	Version 6.2.3.5
Cisco Firepower Threat Defense	Version 6.2.3.6
Cisco Firepower Threat Defense	Version 6.2.3.7
Cisco Firepower Threat Defense	Version 6.2.3.8
Cisco Firepower Threat Defense	Version 6.2.3.9
Cisco Firepower Threat Defense	Version 6.2.3
Cisco Firepower Threat Defense	Version 6.4.0.10
Cisco Firepower Threat Defense	Version 6.4.0.11
Cisco Firepower Threat Defense	Version 6.4.0.12
Cisco Firepower Threat Defense	Version 6.4.0.1
Cisco Firepower Threat Defense	Version 6.4.0.2
Cisco Firepower Threat Defense	Version 6.4.0.3
Cisco Firepower Threat Defense	Version 6.4.0.4
Cisco Firepower Threat Defense	Version 6.4.0.5
Cisco Firepower Threat Defense	Version 6.4.0.6
Cisco Firepower Threat Defense	Version 6.4.0.7
Cisco Firepower Threat Defense	Version 6.4.0.8
Cisco Firepower Threat Defense	Version 6.4.0.9
Cisco Firepower Threat Defense	Version 6.4.0
Cisco Firepower Threat Defense	Version 6.6.0.1
Cisco Firepower Threat Defense	Version 6.6.0
Cisco Firepower Threat Defense	Version 6.6.1
Cisco Firepower Threat Defense	Version 6.6.3
Cisco Firepower Threat Defense	Version 6.6.4
Cisco Firepower Threat Defense	Version 6.6.5
Cisco Firepower Threat Defense	Version 6.7.0.1
Cisco Firepower Threat Defense	Version 6.7.0.2
Cisco Firepower Threat Defense	Version 6.7.0.3
Cisco Firepower Threat Defense	Version 6.7.0
Cisco Firepower Threat Defense	Version 7.0.0.1
Cisco Firepower Threat Defense	Version 7.0.0

Configuration C

43 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.12.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.12.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.12.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.12.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.12.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.12.6
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.6.10
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.6.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.6.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.6.6
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.6.7a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 16.6.9
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.1.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.2.1r
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.3.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.3.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.3.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.3.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.3.4a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.4.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.4.1b
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.4.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.5.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.5.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.6.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.7.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 3.17.0s
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 3.17.1s
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version denali-16.3.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version denali-16.3.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version denali-16.3.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version denali-16.3.7
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version denali-16.3.9
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version everest-16.6.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version everest-16.6.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version everest-16.6.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version fuji-16.9.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version fuji-16.9.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version fuji-16.9.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version fuji-16.9.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version fuji-16.9.6
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version fuji-16.9.7
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version fuji-16.9.8

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-xss-NXOxDhRQ

Source: psirt@cisco.com

Not Applicable

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-dos-9D3hJLuj

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.