CVE-2024-20407

MEDIUM

5.8

CVSS Score

Published: October 23, 2024 at 05:36 PM UTC

Updated: August 11, 2026 at 07:33 PM UTC

2 products affected across 1 vendorSecure Firewall Threat DefenseFirepower Threat Defense

Using Cisco Firepower Threat Defense Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Firepower Threat Defense Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.8

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are not affected by this vulnerability. This vulnerability is due to a logic error when handling embryonic (half-open) TCP connections. An attacker could exploit this vulnerability by sending a crafted traffic pattern through an affected device. A successful exploit could allow unintended traffic to enter the network protected by the affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Firepower Threat Defense · Cisco

60%

6.2.3 ≤ v ≤ 6.2.3.186.4.0 ≤ v ≤ 6.4.0.186.6.0 ≤ v ≤ 6.6.7.26.7.0 ≤ v ≤ 6.7.0.37.0.0 ≤ v ≤ 7.0.6.27.1.0 ≤ v ≤ 7.1.0.37.2.0 ≤ v ≤ 7.2.8.17.3.0 ≤ v ≤ 7.3.1.27.4.0 ≤ v ≤ 7.4.1.16.2.3 6.4.0 6.6.0 6.7.0 7.0.0 7.1.0 7.2.0 7.3.0 7.4.0