CVE-2024-20508

Summary

CVE-2024-20508 is a newly disclosed vulnerability affecting Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine in Cisco IOS XE Software. This issue allows unauthenticated, remote attackers to bypass security policies or cause a denial of service (DoS) condition on impacted devices. The root cause stems from insufficient validation of HTTP requests processed by the Cisco UTD Snort IPS Engine. Malicious actors can exploit this vulnerability by sending crafted HTTP requests, potentially resulting in a Snort process reload. Depending on the action configured for Cisco UTD Snort IPS Engine failure, an attacker could either bypass security policies (fail-open) or cause traffic drops (fail-close).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.