Product:
Cisco Secure Firewall Threat Defense
Summary
A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a denial of service condition. This vulnerability is due to improper implementation of the TLS protocol. An attacker could exploit this vulnerability by sending a crafted TLS packet to an affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.8 | CVE-2026-20006 |
Exploitation
To exploit this vulnerability, an attacker needs to send a specially crafted TLS packet to a device running the affected Cisco Secure FTD Software. If successful, this could lead to the Snort 3 Detection Engine restarting unexpectedly, causing a denial of service condition by dropping network traffic.
Affected Products
- Cisco Secure Firewall Threat Defense: Vulnerable due to improper TLS protocol implementation, leading to potential denial of service.
Mitigation
To mitigate this vulnerability, it is recommended to apply any available patches or updates from Cisco. Additionally, monitoring network traffic for unusual patterns and implementing strict access controls can help reduce the risk of exploitation.