Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is due to improper handling of nested GRE traffic. An attacker could exploit this vulnerability by sending a crafted GRE payload through an affected device. A successful exploit could allow the attacker…

Číst originál na Cisco PSIRT →

CZ · EN/orig

Cisco US

tg: zranitelnost tp: DDoS

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-20221	5.8 3.1 · cisco	–	0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.