High severity · published Nov 15, 2024
CVE-2022-20685
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…
7.5
CVSS
1.5%
EPSS
No
On KEV
Description
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CV
Cyber Vision · Cisco
3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +11 more · source: NVD
SF
Secure Firewall Threat Defense · Cisco
6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more · source: NVD
UT
Unified Threat Defense Snort Intrusion Prevention System Engine · Cisco
3.17.0s; 3.17.1s; 16.6.1; 16.6.5; 16.6.6; 16.6.7a; +34 more · source: NVD
Affected product
CV
Cyber Vision
Cisco
More from Cyber Vision
6.5
CVE-2022-20922
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote…
5.8
CVE-2026-20068
Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability
5.8
CVE-2026-20067
Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability
5.8
CVE-2026-20057
Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability
5.8
CVE-2026-20054
Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Infinite Loop Denial of Service Vulnerability