CVE-2022-20685: Multiple Cisco Products Snort Modbus Denial of Service Vulnerability
Published Nov 15, 2024
·Updated
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected Software
105 affected components
Cisco Snort
Cisco Cyber Vision=3.0.0
Cisco Cyber Vision=3.0.1
Cisco Cyber Vision=3.0.2
Cisco Cyber Vision=3.0.3
Cisco Cyber Vision=3.0.4
Cisco Cyber Vision=3.0.5
Cisco Cyber Vision=3.0.6
Cisco Cyber Vision=3.1.0
Cisco Cyber Vision=3.1.1
Cisco Cyber Vision=3.1.2
Cisco Cyber Vision=3.2.0
Cisco Cyber Vision=3.2.1
Cisco Cyber Vision=3.2.2
Cisco Cyber Vision=3.2.3
Cisco Cyber Vision=3.2.4
Cisco Cyber Vision=4.0.0
Cisco Cyber Vision=4.0.1
Cisco Firepower Threat Defense=6.2.3
Cisco Firepower Threat Defense=6.2.3.1
Cisco Firepower Threat Defense=6.2.3.2
Cisco Firepower Threat Defense=6.2.3.3
Cisco Firepower Threat Defense=6.2.3.4
Cisco Firepower Threat Defense=6.2.3.5
Cisco Firepower Threat Defense=6.2.3.6
Cisco Firepower Threat Defense=6.2.3.7
Cisco Firepower Threat Defense=6.2.3.8
Cisco Firepower Threat Defense=6.2.3.9
Cisco Firepower Threat Defense=6.2.3.10
Cisco Firepower Threat Defense=6.2.3.11
Cisco Firepower Threat Defense=6.2.3.12
Cisco Firepower Threat Defense=6.2.3.13
Cisco Firepower Threat Defense=6.2.3.14
Cisco Firepower Threat Defense=6.2.3.15
Cisco Firepower Threat Defense=6.2.3.16
Cisco Firepower Threat Defense=6.2.3.17
Cisco Firepower Threat Defense=6.2.3.18
Cisco Firepower Threat Defense=6.4.0
Cisco Firepower Threat Defense=6.4.0.1
Cisco Firepower Threat Defense=6.4.0.2
Cisco Firepower Threat Defense=6.4.0.3
Cisco Firepower Threat Defense=6.4.0.4
Cisco Firepower Threat Defense=6.4.0.5
Cisco Firepower Threat Defense=6.4.0.6
Cisco Firepower Threat Defense=6.4.0.7
Cisco Firepower Threat Defense=6.4.0.8
Cisco Firepower Threat Defense=6.4.0.9
Cisco Firepower Threat Defense=6.4.0.10
Cisco Firepower Threat Defense=6.4.0.11
Cisco Firepower Threat Defense=6.4.0.12
Cisco Firepower Threat Defense=6.6.0
Cisco Firepower Threat Defense=6.6.0.1
Cisco Firepower Threat Defense=6.6.1
Cisco Firepower Threat Defense=6.6.3
Cisco Firepower Threat Defense=6.6.4
Cisco Firepower Threat Defense=6.6.5
Cisco Firepower Threat Defense=6.7.0
Cisco Firepower Threat Defense=6.7.0.1
Cisco Firepower Threat Defense=6.7.0.2
Cisco Firepower Threat Defense=6.7.0.3
Cisco Firepower Threat Defense=7.0.0
Cisco Firepower Threat Defense=7.0.0.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=3.17.0s
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=3.17.1s
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.6.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.6.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.6.6
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.6.7a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.6.9
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.6.10
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.12.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.12.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.12.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.12.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.12.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=16.12.6
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.1.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.2.1r
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.3.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.3.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.3.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.3.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.3.4a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.4.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.4.1b
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.4.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.5.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.5.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.6.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=17.7.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=denali-16.3.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=denali-16.3.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=denali-16.3.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=denali-16.3.7
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=denali-16.3.9
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=everest-16.6.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=everest-16.6.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=everest-16.6.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=fuji-16.9.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=fuji-16.9.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=fuji-16.9.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=fuji-16.9.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=fuji-16.9.6
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=fuji-16.9.7
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine=fuji-16.9.8
Event History
Nov 15, 2024
CVE Published
via MITRE·03:36 PM
Data Sourced
via MITRE·03:36 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-20685?
The severity of CVE-2022-20685 is classified as high due to its potential to trigger a denial of service condition.
2
How do I fix CVE-2022-20685?
To fix CVE-2022-20685, upgrade to a patched version of the Snort detection engine that addresses the integer overflow vulnerability.
3
What systems are affected by CVE-2022-20685?
CVE-2022-20685 affects devices running the Cisco Snort detection engine that utilize the Modbus preprocessor.
4
What type of attack does CVE-2022-20685 facilitate?
CVE-2022-20685 facilitates an unauthenticated remote denial of service attack against affected devices.
5
Can CVE-2022-20685 be exploited remotely?
Yes, CVE-2022-20685 can be exploited by an unauthenticated remote attacker.