Medium severity5.8NVD Advisory· Published May 22, 2024· Updated Aug 11, 2026
CVE-2024-20363
CVE-2024-20363
Description
Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet handling. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*range: >=3.0.0-233,<3.1.69.0
- (no CPE)
cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.4:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.5:*:*:*:*:*:*:*
- Range: 7.4.0
- Cisco/Cisco UTD SNORT IPS Engine Softwarev5Range: 17.6.4
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.