CVE Listesine Dön
CVE-2024-20407

Vulnerability in Cisco Secure Firewall Threat Defense

CVSS Skor

5.8

EPSS İhtimal

%0.4

Risk Skoru

0.0

Yayın

1 yıl önce

Overview (Genel Bakış)Public Exploits (0)Newsroom (Haberler)Vulnerability Timeline
Yama durumu henüz doğrulanamadı

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2024-20407 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are not affected by this vulnerability. This vulnerability is due to a logic error when handling embryonic (half-open) TCP connections. An attacker could exploit this vulnerability by sending a crafted traffic pattern through an affected device. A successful exploit could allow unintended traffic to enter the network protected by the affected device.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2024-20407 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1ciscosecure firewall threat defense İncele
2ciscosecure firewall threat defense İncele
3ciscosecure firewall threat defense İncele
4ciscosecure firewall threat defense İncele
5ciscosecure firewall threat defense İncele
6ciscosecure firewall threat defense İncele
7ciscosecure firewall threat defense İncele
8ciscosecure firewall threat defense İncele
9ciscosecure firewall threat defense İncele
10ciscosecure firewall threat defense İncele
11ciscosecure firewall threat defense İncele
12ciscosecure firewall threat defense İncele
13ciscosecure firewall threat defense İncele
14ciscosecure firewall threat defense İncele
15ciscosecure firewall threat defense İncele
16ciscosecure firewall threat defense İncele
17ciscosecure firewall threat defense İncele
18ciscosecure firewall threat defense İncele
19ciscosecure firewall threat defense İncele
20ciscosecure firewall threat defense İncele
21ciscosecure firewall threat defense İncele
22ciscosecure firewall threat defense İncele
23ciscosecure firewall threat defense İncele
24ciscosecure firewall threat defense İncele
25ciscosecure firewall threat defense İncele
26ciscosecure firewall threat defense İncele
27ciscosecure firewall threat defense İncele
28ciscosecure firewall threat defense İncele
29ciscosecure firewall threat defense İncele
30ciscosecure firewall threat defense İncele
31ciscosecure firewall threat defense İncele
32ciscosecure firewall threat defense İncele
33ciscosecure firewall threat defense İncele
34ciscosecure firewall threat defense İncele
35ciscosecure firewall threat defense İncele
36ciscosecure firewall threat defense İncele
37ciscosecure firewall threat defense İncele
38ciscosecure firewall threat defense İncele
39ciscosecure firewall threat defense İncele
40ciscosecure firewall threat defense İncele
41ciscosecure firewall threat defense İncele
42ciscosecure firewall threat defense İncele
43ciscosecure firewall threat defense İncele
44ciscosecure firewall threat defense İncele
45ciscosecure firewall threat defense İncele
46ciscosecure firewall threat defense İncele
47ciscosecure firewall threat defense İncele
48ciscosecure firewall threat defense İncele
49ciscosecure firewall threat defense İncele
50ciscosecure firewall threat defense İncele
51ciscosecure firewall threat defense İncele
52ciscosecure firewall threat defense İncele
53ciscosecure firewall threat defense İncele
54ciscosecure firewall threat defense İncele
55ciscosecure firewall threat defense İncele
56ciscosecure firewall threat defense İncele
57ciscosecure firewall threat defense İncele
58ciscosecure firewall threat defense İncele
59ciscosecure firewall threat defense İncele
60ciscosecure firewall threat defense İncele
61ciscosecure firewall threat defense İncele
62ciscosecure firewall threat defense İncele
63ciscosecure firewall threat defense İncele
64ciscosecure firewall threat defense İncele
65ciscosecure firewall threat defense İncele
66ciscosecure firewall threat defense İncele
67ciscosecure firewall threat defense İncele
68ciscosecure firewall threat defense İncele
69ciscosecure firewall threat defense İncele
70ciscosecure firewall threat defense İncele
71ciscosecure firewall threat defense İncele
72ciscosecure firewall threat defense İncele
73ciscosecure firewall threat defense İncele
74ciscosecure firewall threat defense İncele
75ciscosecure firewall threat defense İncele
76ciscosecure firewall threat defense İncele
77ciscosecure firewall threat defense İncele
78ciscosecure firewall threat defense İncele
79ciscosecure firewall threat defense İncele
80ciscosecure firewall threat defense İncele
81ciscosecure firewall threat defense İncele
82ciscosecure firewall threat defense İncele
83ciscosecure firewall threat defense İncele
84ciscosecure firewall threat defense İncele
85ciscosecure firewall threat defense İncele
86ciscosecure firewall threat defense İncele
87ciscosecure firewall threat defense İncele
88ciscosecure firewall threat defense İncele
89ciscosecure firewall threat defense İncele
90ciscosecure firewall threat defense İncele
Total Affected Vendor: 1|Products: 90

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
5.8CVSS V31MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NNVD

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Yama doğrulanana kadar üretici bültenini izleyin; bilinmeyen durumu “yama yok” olarak yorumlamayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE için henüz doğrulanmış public PoC, exploit repository’si veya Metasploit modülü bulunamadı.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-20407 is associated with the following CWEs:

CWE-399: Common Weakness Enumeration Entry CWE-399

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-20407 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-bypass-PTry37fXvendor-advisory

CVSS Vektör Radar Grafiği

5.8 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredNone (Gerekmiyor)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)None (Yok)

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Üreticiyi takip et

C
cisco logo
cisco

Zafiyet Türü (CWE & CAPEC)

CWE-399

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2024-20407"
CVE-2024-20407 · Vulnerability in Cisco Secure Firewall Threat Defense · DayBreach