CVE-2024-20351: Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability

Published Oct 23, 2024
·
Updated

A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER Services could allow an unauthenticated, remote attacker to cause legitimate network traffic to be dropped, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of TCP/IP network traffic. An attacker could exploit this vulnerability by sending a large amount of TCP/IP network traffic through the affected device. A successful exploit could allow the attacker to cause the Cisco FTD device to drop network traffic, resulting in a DoS condition. The affected device must be rebooted to resolve the DoS condition.

Affected Software

86 affected components
Cisco Firepower Threat Defense
Cisco Secure Firewall Threat Defense=6.2.3
Cisco Secure Firewall Threat Defense=6.2.3.1
Cisco Secure Firewall Threat Defense=6.2.3.2
Cisco Secure Firewall Threat Defense=6.2.3.3
Cisco Secure Firewall Threat Defense=6.2.3.4
Cisco Secure Firewall Threat Defense=6.2.3.5
Cisco Secure Firewall Threat Defense=6.2.3.6
Cisco Secure Firewall Threat Defense=6.2.3.7
Cisco Secure Firewall Threat Defense=6.2.3.8
Cisco Secure Firewall Threat Defense=6.2.3.9
Cisco Secure Firewall Threat Defense=6.2.3.10
Cisco Secure Firewall Threat Defense=6.2.3.11
Cisco Secure Firewall Threat Defense=6.2.3.12
Cisco Secure Firewall Threat Defense=6.2.3.13
Cisco Secure Firewall Threat Defense=6.2.3.14
Cisco Secure Firewall Threat Defense=6.2.3.15
Cisco Secure Firewall Threat Defense=6.2.3.16
Cisco Secure Firewall Threat Defense=6.2.3.17
Cisco Secure Firewall Threat Defense=6.2.3.18
Cisco Secure Firewall Threat Defense=6.4.0
Cisco Secure Firewall Threat Defense=6.4.0.1
Cisco Secure Firewall Threat Defense=6.4.0.2
Cisco Secure Firewall Threat Defense=6.4.0.3
Cisco Secure Firewall Threat Defense=6.4.0.4
Cisco Secure Firewall Threat Defense=6.4.0.5
Cisco Secure Firewall Threat Defense=6.4.0.6
Cisco Secure Firewall Threat Defense=6.4.0.7
Cisco Secure Firewall Threat Defense=6.4.0.8
Cisco Secure Firewall Threat Defense=6.4.0.9
Cisco Secure Firewall Threat Defense=6.4.0.10
Cisco Secure Firewall Threat Defense=6.4.0.11
Cisco Secure Firewall Threat Defense=6.4.0.12
Cisco Secure Firewall Threat Defense=6.4.0.13
Cisco Secure Firewall Threat Defense=6.4.0.14
Cisco Secure Firewall Threat Defense=6.4.0.15
Cisco Secure Firewall Threat Defense=6.4.0.16
Cisco Secure Firewall Threat Defense=6.4.0.17
Cisco Secure Firewall Threat Defense=6.4.0.18
Cisco Secure Firewall Threat Defense=6.6.0
Cisco Secure Firewall Threat Defense=6.6.0.1
Cisco Secure Firewall Threat Defense=6.6.1
Cisco Secure Firewall Threat Defense=6.6.3
Cisco Secure Firewall Threat Defense=6.6.4
Cisco Secure Firewall Threat Defense=6.6.5
Cisco Secure Firewall Threat Defense=6.6.5.1
Cisco Secure Firewall Threat Defense=6.6.5.2
Cisco Secure Firewall Threat Defense=6.6.7
Cisco Secure Firewall Threat Defense=6.6.7.1
Cisco Secure Firewall Threat Defense=6.6.7.2
Cisco Secure Firewall Threat Defense=6.7.0
Cisco Secure Firewall Threat Defense=6.7.0.1
Cisco Secure Firewall Threat Defense=6.7.0.2
Cisco Secure Firewall Threat Defense=6.7.0.3
Cisco Secure Firewall Threat Defense=7.0.0
Cisco Secure Firewall Threat Defense=7.0.0.1
Cisco Secure Firewall Threat Defense=7.0.1
Cisco Secure Firewall Threat Defense=7.0.1.1
Cisco Secure Firewall Threat Defense=7.0.2
Cisco Secure Firewall Threat Defense=7.0.2.1
Cisco Secure Firewall Threat Defense=7.0.3
Cisco Secure Firewall Threat Defense=7.0.4
Cisco Secure Firewall Threat Defense=7.0.5
Cisco Secure Firewall Threat Defense=7.0.6
Cisco Secure Firewall Threat Defense=7.0.6.1
Cisco Secure Firewall Threat Defense=7.1.0
Cisco Secure Firewall Threat Defense=7.1.0.1
Cisco Secure Firewall Threat Defense=7.1.0.2
Cisco Secure Firewall Threat Defense=7.1.0.3
Cisco Secure Firewall Threat Defense=7.2.0
Cisco Secure Firewall Threat Defense=7.2.0.1
Cisco Secure Firewall Threat Defense=7.2.1
Cisco Secure Firewall Threat Defense=7.2.2
Cisco Secure Firewall Threat Defense=7.2.3
Cisco Secure Firewall Threat Defense=7.2.4
Cisco Secure Firewall Threat Defense=7.2.4.1
Cisco Secure Firewall Threat Defense=7.2.5
Cisco Secure Firewall Threat Defense=7.2.5.1
Cisco Secure Firewall Threat Defense=7.2.5.2
Cisco Secure Firewall Threat Defense=7.3.0
Cisco Secure Firewall Threat Defense=7.3.1
Cisco Secure Firewall Threat Defense=7.3.1.1
Cisco Secure Firewall Threat Defense=7.3.1.2
Cisco Secure Firewall Threat Defense=7.4.0
Cisco Secure Firewall Threat Defense=7.4.1
Cisco Secure Firewall Threat Defense=7.4.1.1

Event History

Oct 23, 2024
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-20351?

CVE-2024-20351 is considered a high severity vulnerability due to its potential to cause denial of service by dropping legitimate network traffic.

2

How do I fix CVE-2024-20351?

To fix CVE-2024-20351, apply the latest patches and updates provided by Cisco for the Firepower Threat Defense software.

3

Who is affected by CVE-2024-20351?

CVE-2024-20351 affects users of Cisco Firepower Threat Defense and Cisco FirePOWER Services that utilize the Snort Detection Engine.

4

Can CVE-2024-20351 be exploited remotely?

Yes, CVE-2024-20351 can be exploited by an unauthenticated remote attacker.

5

What types of threats does CVE-2024-20351 pose?

CVE-2024-20351 poses a threat of denial of service by disrupting legitimate network traffic handling.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203