Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple Cisco Products Snort Modbus Denial of Service Vulnerability
Vulnerability Description
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
Cisco Products Snort 输入验证错误漏洞
Vulnerability Description
Cisco Products Snort是美国思科（Cisco）公司的一个用于思科产品的Snort引擎。 Cisco Products Snort Modbus 存在输入验证错误漏洞，该漏洞源于处理 Modbus 流量时出现了整数溢出。攻击者可以通过受影响的设备发送精心设计的 Modbus 流量来导致 Snort 进程挂起，从而导致流量检查停止。
CVSS Information
N/A
Vulnerability Type
N/A