CVE-2026-20054
5.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.
This vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to enter an infinite loop, causing a DoS condition.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Cyber Vision | 3.0.0 | affected |
| Cisco | Cisco Cyber Vision | 3.0.2 | affected |
| Cisco | Cisco Cyber Vision | 3.0.3 | affected |
| Cisco | Cisco Cyber Vision | 3.0.1 | affected |
| Cisco | Cisco Cyber Vision | 3.1.0 | affected |
| Cisco | Cisco Cyber Vision | 3.0.4 | affected |
| Cisco | Cisco Cyber Vision | 3.1.1 | affected |
| Cisco | Cisco Cyber Vision | 3.1.2 | affected |
| Cisco | Cisco Cyber Vision | 3.2.0 | affected |
| Cisco | Cisco Cyber Vision | 3.0.5 | affected |
| Cisco | Cisco Cyber Vision | 3.2.1 | affected |
| Cisco | Cisco Cyber Vision | 3.0.6 | affected |
| Cisco | Cisco Cyber Vision | 3.2.2 | affected |
| Cisco | Cisco Cyber Vision | 3.2.3 | affected |
| Cisco | Cisco Cyber Vision | 3.2.4 | affected |
| Cisco | Cisco Cyber Vision | 4.0.0 | affected |
| Cisco | Cisco Cyber Vision | 4.0.1 | affected |
| Cisco | Cisco Cyber Vision | 4.0.2 | affected |
| Cisco | Cisco Cyber Vision | 4.0.3 | affected |
| Cisco | Cisco Cyber Vision | 4.1.0 | affected |
| Cisco | Cisco Cyber Vision | 4.1.1 | affected |
| Cisco | Cisco Cyber Vision | 4.1.2 | affected |
| Cisco | Cisco Cyber Vision | 4.1.3 | affected |
| Cisco | Cisco Cyber Vision | 4.1.4 | affected |
| Cisco | Cisco Cyber Vision | 4.2.0 | affected |
| Cisco | Cisco Cyber Vision | 4.2.1 | affected |
| Cisco | Cisco Cyber Vision | 4.1.5 | affected |
| Cisco | Cisco Cyber Vision | 4.2.2 | affected |
| Cisco | Cisco Cyber Vision | 4.2.X | affected |
| Cisco | Cisco Cyber Vision | 4.2.3 | affected |
| Cisco | Cisco Cyber Vision | 4.2.4 | affected |
| Cisco | Cisco Cyber Vision | 4.2.6 | affected |
| Cisco | Cisco Cyber Vision | 4.1.6 | affected |
| Cisco | Cisco Cyber Vision | 4.3.0 | affected |
| Cisco | Cisco Cyber Vision | 4.3.1 | affected |
| Cisco | Cisco Cyber Vision | 4.3.2 | affected |
| Cisco | Cisco Cyber Vision | 4.3.3 | affected |
| Cisco | Cisco Cyber Vision | 4.4.0 | affected |
| Cisco | Cisco Cyber Vision | 4.4.1 | affected |
| Cisco | Cisco Cyber Vision | 4.4.2 | affected |
| Cisco | Cisco Cyber Vision | 4.4.3 | affected |
| Cisco | Cisco Cyber Vision | 4.1.7 | affected |
| Cisco | Cisco Cyber Vision | 5.0.0 | affected |
| Cisco | Cisco Cyber Vision | 5.0.1 | affected |
| Cisco | Cisco Cyber Vision | 5.0.2 | affected |
| Cisco | Cisco Cyber Vision | 5.1.0 | affected |
| Cisco | Cisco Cyber Vision | 5.1.1 | affected |
| Cisco | Cisco Cyber Vision | 5.1.2 | affected |
| Cisco | Cisco Cyber Vision | 5.1.3 | affected |
| Cisco | Cisco Cyber Vision | 5.2.0 | affected |
| Cisco | Cisco Cyber Vision | 5.2.1 | affected |
| Cisco | Cisco Cyber Vision | 5.3.0 | affected |
| Cisco | Cisco Cyber Vision | 5.3.1 | affected |
| Cisco | Cisco Cyber Vision | 5.3.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.0 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.0.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.3.0 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.3 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.3.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.4 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.5 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.4.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.3.1.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.0 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.5.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.6 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.1.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.7 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.5.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.3.1.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.8 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.0 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.8.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.2.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.9 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.7.0 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.2.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.10 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.2.3 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.7.10 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.2.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.7.10.1 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.2.4 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.2.10.2 | affected |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.4.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 3.17.1S | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Fuji-16.9.5 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.6.6 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Fuji-16.9.6 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 3.17.0S | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Fuji-16.9.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Denali-16.3.7 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Fuji-16.9.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Fuji-16.9.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Everest-16.6.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Everest-16.6.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.6.5 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Denali-16.3.5 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.2.1r | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.1.1 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Everest-16.6.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.6.7a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Denali-16.3.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.6.1 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Denali-16.3.9 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Denali-16.3.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.4.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.5 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.5.1 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Fuji-16.9.7 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.6.9 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.5.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.4a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.4.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.4.1b | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.6.10 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.7.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.6 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | Fuji-16.9.8 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.8.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.7 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.5 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.3a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.7.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.10.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.6 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 16.12.8 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.7 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.2a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.5 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.11.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.3a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.6 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.8 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.3.8a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.6a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.4a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.2 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.13.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.5a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.7 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.14.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.3a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.15.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.8 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.6 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.6.8a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.16.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.5e | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.4a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.15.2c | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.5f | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.4b | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.15.2a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.5 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.17.1 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.5a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.7a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.15.3a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.15.3 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.5b | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.5c | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.15.4 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.7b | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.18.1 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.18.1a | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.6 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.9.8 | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.15.4c | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.12.5d | affected |
| Cisco | Cisco UTD SNORT IPS Engine Software | 17.18.2 | affected |
Weaknesses
- CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.