Description
A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service (DoS) condition. The vulnerability is due to the incomplete error handling of the SSL or TLS packet header during the connection establishment. An attacker could exploit this vulnerability by sending a crafted SSL or TLS packet during the connection handshake. An exploit could allow the attacker to cause the SNORT detection engine to unexpectedly restart, resulting in a partial DoS condition while the detection engine restarts. Versions prior to 6.2.3.4 are affected.
Affected products
cisco: secure firewall threat defense
References4
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c… Vendor Advisory
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c… Vendor Advisory
- www.securityfocus.com/bid/107099 Third Party AdvisoryVDB Entry
- www.securityfocus.com/bid/107099 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
5.8
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - EPSS — exploit probability
- 2% percentile: 83 · as of 10 November 2026
- CWE
- CWE-20CWE-755
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.