Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue

This issue affects Cisco FTD Software if it is running Cisco VDB Release 396.

Determine the Cisco VDB Release

To determine which Cisco VDB release a Cisco FTD device is running, use the show version CLI command, as shown in the following example:

FTD> show version
-------------[ ftd-fmc2-mgmt ]---------------------
Model                     : Cisco Firepower Threat Defense for VMware (75) Version 7.2.8 (Build 25)
UUID                      : a0ed2102-6a3e-11ef-b9a6-b8830d51972b
LSP version               : lsp-rel-20240930-1858
VDB version               : 396
----------------------------------------------------
FTD>

View the VDB version line. If the release is 396, the issue that is described in this advisory is present. If any other release is listed, the issue that is described in this advisory is not present.

To view the Cisco VDB release in the Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center, GUI, choose Help > About.

Only products listed in the Vulnerable Products section of this advisory are known to be affected by this issue.

Cisco has confirmed that this vulnerability does not affect the following products:

Cisco Adaptive Security Appliance (ASA) Software
Cisco FMC Software
Open Source Snort 2
Open Source Snort 3

October 24, 2024