CVE-2022-20685

Summary

CVE-2022-20685 is a newlydiscovered vulnerability affecting the Modbus preprocessor in Snort's detection engine. This issue results in an integer overflow during the processing of Modbus traffic, making it susceptible to remote, unauthenticated denial-of-service (DoS) attacks. Attackers can exploit this vulnerability by sending custom Modbus data to an affected device, potentially causing the Snort process to hang and halt traffic inspection. Cisco has released patches to mitigate this problem, and no workarounds have been identified to address the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.