CVE-2024-20407

Published: Oct 23, 2024Modified: Aug 5, 2025

5.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: psirt@cisco.com (Secondary)

Description

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are not affected by this vulnerability. This vulnerability is due to a logic error when handling embryonic (half-open) TCP connections. An attacker could exploit this vulnerability by sending a crafted traffic pattern through an affected device. A successful exploit could allow unintended traffic to enter the network protected by the affected device.

Affected (90)

Products: Cisco: Firepower Threat Defense

Cisco

1 product

Firepower Threat Defense

Configuration A

90 vulnerable

Vulnerable Software	Affected Versions
Cisco Firepower Threat Defense	Version 6.2.3.10
Cisco Firepower Threat Defense	Version 6.2.3.11
Cisco Firepower Threat Defense	Version 6.2.3.12
Cisco Firepower Threat Defense	Version 6.2.3.13
Cisco Firepower Threat Defense	Version 6.2.3.14
Cisco Firepower Threat Defense	Version 6.2.3.15
Cisco Firepower Threat Defense	Version 6.2.3.16
Cisco Firepower Threat Defense	Version 6.2.3.17
Cisco Firepower Threat Defense	Version 6.2.3.18
Cisco Firepower Threat Defense	Version 6.2.3.1
Cisco Firepower Threat Defense	Version 6.2.3.2
Cisco Firepower Threat Defense	Version 6.2.3.3
Cisco Firepower Threat Defense	Version 6.2.3.4
Cisco Firepower Threat Defense	Version 6.2.3.5
Cisco Firepower Threat Defense	Version 6.2.3.6
Cisco Firepower Threat Defense	Version 6.2.3.7
Cisco Firepower Threat Defense	Version 6.2.3.8
Cisco Firepower Threat Defense	Version 6.2.3.9
Cisco Firepower Threat Defense	Version 6.2.3
Cisco Firepower Threat Defense	Version 6.4.0.10
Cisco Firepower Threat Defense	Version 6.4.0.11
Cisco Firepower Threat Defense	Version 6.4.0.12
Cisco Firepower Threat Defense	Version 6.4.0.13
Cisco Firepower Threat Defense	Version 6.4.0.14
Cisco Firepower Threat Defense	Version 6.4.0.15
Cisco Firepower Threat Defense	Version 6.4.0.16
Cisco Firepower Threat Defense	Version 6.4.0.17
Cisco Firepower Threat Defense	Version 6.4.0.18
Cisco Firepower Threat Defense	Version 6.4.0.1
Cisco Firepower Threat Defense	Version 6.4.0.2
Cisco Firepower Threat Defense	Version 6.4.0.3
Cisco Firepower Threat Defense	Version 6.4.0.4
Cisco Firepower Threat Defense	Version 6.4.0.5
Cisco Firepower Threat Defense	Version 6.4.0.6
Cisco Firepower Threat Defense	Version 6.4.0.7
Cisco Firepower Threat Defense	Version 6.4.0.8
Cisco Firepower Threat Defense	Version 6.4.0.9
Cisco Firepower Threat Defense	Version 6.4.0
Cisco Firepower Threat Defense	Version 6.6.0.1
Cisco Firepower Threat Defense	Version 6.6.0
Cisco Firepower Threat Defense	Version 6.6.1
Cisco Firepower Threat Defense	Version 6.6.3
Cisco Firepower Threat Defense	Version 6.6.4
Cisco Firepower Threat Defense	Version 6.6.5.1
Cisco Firepower Threat Defense	Version 6.6.5.2
Cisco Firepower Threat Defense	Version 6.6.5
Cisco Firepower Threat Defense	Version 6.6.7.1
Cisco Firepower Threat Defense	Version 6.6.7.2
Cisco Firepower Threat Defense	Version 6.6.7
Cisco Firepower Threat Defense	Version 6.7.0.1
Cisco Firepower Threat Defense	Version 6.7.0.2
Cisco Firepower Threat Defense	Version 6.7.0.3
Cisco Firepower Threat Defense	Version 6.7.0
Cisco Firepower Threat Defense	Version 7.0.0.1
Cisco Firepower Threat Defense	Version 7.0.0
Cisco Firepower Threat Defense	Version 7.0.1.1
Cisco Firepower Threat Defense	Version 7.0.1
Cisco Firepower Threat Defense	Version 7.0.2.1
Cisco Firepower Threat Defense	Version 7.0.2
Cisco Firepower Threat Defense	Version 7.0.3
Cisco Firepower Threat Defense	Version 7.0.4
Cisco Firepower Threat Defense	Version 7.0.5
Cisco Firepower Threat Defense	Version 7.0.6.1
Cisco Firepower Threat Defense	Version 7.0.6.2
Cisco Firepower Threat Defense	Version 7.0.6
Cisco Firepower Threat Defense	Version 7.1.0.1
Cisco Firepower Threat Defense	Version 7.1.0.2
Cisco Firepower Threat Defense	Version 7.1.0.3
Cisco Firepower Threat Defense	Version 7.1.0
Cisco Firepower Threat Defense	Version 7.2.0.1
Cisco Firepower Threat Defense	Version 7.2.0
Cisco Firepower Threat Defense	Version 7.2.1
Cisco Firepower Threat Defense	Version 7.2.2
Cisco Firepower Threat Defense	Version 7.2.3
Cisco Firepower Threat Defense	Version 7.2.4.1
Cisco Firepower Threat Defense	Version 7.2.4
Cisco Firepower Threat Defense	Version 7.2.5.1
Cisco Firepower Threat Defense	Version 7.2.5.2
Cisco Firepower Threat Defense	Version 7.2.5
Cisco Firepower Threat Defense	Version 7.2.6
Cisco Firepower Threat Defense	Version 7.2.7
Cisco Firepower Threat Defense	Version 7.2.8.1
Cisco Firepower Threat Defense	Version 7.2.8
Cisco Firepower Threat Defense	Version 7.3.0
Cisco Firepower Threat Defense	Version 7.3.1.1
Cisco Firepower Threat Defense	Version 7.3.1.2
Cisco Firepower Threat Defense	Version 7.3.1
Cisco Firepower Threat Defense	Version 7.4.0
Cisco Firepower Threat Defense	Version 7.4.1.1
Cisco Firepower Threat Defense	Version 7.4.1

Related CWEs

CWE-399

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-bypass-PTry37fX

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.