Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial...

6.5 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Description

Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the disclosure of possible sensitive data or cause the Snort 3 Detection Engine to crash.

This vulnerability is due to an error in the logic of buffer handling when the MIME fields of the HTTP header are parsed. This can result in a buffer under-read. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to induce one of two possible outcomes: the unexpected restarting of the Snort 3 Detection Engine, which could cause a denial of service (DoS) condition, or information disclosure of sensitive information in the Snort 3 data stream. Due to the under-read condition, it is possible that sensitive information that is not valid connection data could be returned.

Basic Information

ID CVE-2025-20359

Source cisco

Published Oct 15, 2025 at 16:17

Affected Product

Vendor Cisco

Product Cisco Cyber Vision

Version 3.0.0

Affected Versions Cisco Cisco Cyber Vision 3.0.0
Cisco Cisco Cyber Vision 3.0.2
Cisco Cisco Cyber Vision 3.0.3
Cisco Cisco Cyber Vision 3.0.1
Cisco Cisco Cyber Vision 3.1.0
Cisco Cisco Cyber Vision 3.0.4
Cisco Cisco Cyber Vision 3.1.1
Cisco Cisco Cyber Vision 3.1.2
Cisco Cisco Cyber Vision 3.2.0
Cisco Cisco Cyber Vision 3.0.5
Cisco Cisco Cyber Vision 3.2.1
Cisco Cisco Cyber Vision 3.0.6
Cisco Cisco Cyber Vision 3.2.2
Cisco Cisco Cyber Vision 3.2.3
Cisco Cisco Cyber Vision 3.2.4
Cisco Cisco Cyber Vision 4.0.0
Cisco Cisco Cyber Vision 4.0.1
Cisco Cisco Cyber Vision 4.0.2
Cisco Cisco Cyber Vision 4.0.3
Cisco Cisco Cyber Vision 4.1.0
Cisco Cisco Cyber Vision 4.1.1
Cisco Cisco Cyber Vision 4.1.2
Cisco Cisco Cyber Vision 4.1.3
Cisco Cisco Cyber Vision 4.1.4
Cisco Cisco Cyber Vision 4.2.0
Cisco Cisco Cyber Vision 4.2.1
Cisco Cisco Cyber Vision 4.1.5
Cisco Cisco Cyber Vision 4.2.2
Cisco Cisco Cyber Vision 4.2.X
Cisco Cisco Cyber Vision 4.2.3
Cisco Cisco Cyber Vision 4.2.4
Cisco Cisco Cyber Vision 4.2.6
Cisco Cisco Cyber Vision 4.1.6
Cisco Cisco Cyber Vision 4.3.0
Cisco Cisco Cyber Vision 4.3.1
Cisco Cisco Cyber Vision 4.3.2
Cisco Cisco Cyber Vision 4.3.3
Cisco Cisco Cyber Vision 4.4.0
Cisco Cisco Cyber Vision 4.4.1
Cisco Cisco Cyber Vision 4.4.2
Cisco Cisco Cyber Vision 4.4.3
Cisco Cisco Cyber Vision 4.1.7
Cisco Cisco Cyber Vision 5.0.0
Cisco Cisco Cyber Vision 5.0.1
Cisco Cisco Cyber Vision 5.0.2
Cisco Cisco Cyber Vision 5.1.0
Cisco Cisco Cyber Vision 5.1.1
Cisco Cisco Cyber Vision 5.1.2
Cisco Cisco Cyber Vision 5.1.3
Cisco Cisco Cyber Vision 5.2.0
Cisco Cisco Cyber Vision 5.2.1
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.1
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.1.1
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.0
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.1
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.7.0
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.2
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.1
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.3
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.4
Cisco Cisco UTD SNORT IPS Engine Software 3.17.1S
Cisco Cisco UTD SNORT IPS Engine Software 16.12.3
Cisco Cisco UTD SNORT IPS Engine Software 16.12.4
Cisco Cisco UTD SNORT IPS Engine Software 17.3.1a
Cisco Cisco UTD SNORT IPS Engine Software 16.6.6
Cisco Cisco UTD SNORT IPS Engine Software 16.12.2
Cisco Cisco UTD SNORT IPS Engine Software 3.17.0S
Cisco Cisco UTD SNORT IPS Engine Software 16.6.5
Cisco Cisco UTD SNORT IPS Engine Software 17.2.1r
Cisco Cisco UTD SNORT IPS Engine Software 17.1.1
Cisco Cisco UTD SNORT IPS Engine Software 16.6.7a
Cisco Cisco UTD SNORT IPS Engine Software 16.6.1
Cisco Cisco UTD SNORT IPS Engine Software 16.12.1a
Cisco Cisco UTD SNORT IPS Engine Software 17.3.2
Cisco Cisco UTD SNORT IPS Engine Software 17.4.1a
Cisco Cisco UTD SNORT IPS Engine Software 16.12.5
Cisco Cisco UTD SNORT IPS Engine Software 17.5.1
Cisco Cisco UTD SNORT IPS Engine Software 16.6.9
Cisco Cisco UTD SNORT IPS Engine Software 17.3.3
Cisco Cisco UTD SNORT IPS Engine Software 17.5.1a
Cisco Cisco UTD SNORT IPS Engine Software 17.3.4
Cisco Cisco UTD SNORT IPS Engine Software 17.3.4a
Cisco Cisco UTD SNORT IPS Engine Software 17.4.2
Cisco Cisco UTD SNORT IPS Engine Software 17.4.1b
Cisco Cisco UTD SNORT IPS Engine Software 17.6.1a
Cisco Cisco UTD SNORT IPS Engine Software 16.6.10
Cisco Cisco UTD SNORT IPS Engine Software 17.7.1a
Cisco Cisco UTD SNORT IPS Engine Software 16.12.6
Cisco Cisco UTD SNORT IPS Engine Software 17.6.2
Cisco Cisco UTD SNORT IPS Engine Software 17.8.1a
Cisco Cisco UTD SNORT IPS Engine Software 16.12.7
Cisco Cisco UTD SNORT IPS Engine Software 17.3.5
Cisco Cisco UTD SNORT IPS Engine Software 17.6.3
Cisco Cisco UTD SNORT IPS Engine Software 17.6.3a
Cisco Cisco UTD SNORT IPS Engine Software 17.7.2
Cisco Cisco UTD SNORT IPS Engine Software 17.9.1a
Cisco Cisco UTD SNORT IPS Engine Software 17.6.4
Cisco Cisco UTD SNORT IPS Engine Software 17.3.6
Cisco Cisco UTD SNORT IPS Engine Software 16.12.8
Cisco Cisco UTD SNORT IPS Engine Software 17.3.7
Cisco Cisco UTD SNORT IPS Engine Software 17.9.2a
Cisco Cisco UTD SNORT IPS Engine Software 17.6.5
Cisco Cisco UTD SNORT IPS Engine Software 17.11.1a
Cisco Cisco UTD SNORT IPS Engine Software 17.12.1a
Cisco Cisco UTD SNORT IPS Engine Software 17.6.6
Cisco Cisco UTD SNORT IPS Engine Software 17.3.8
Cisco Cisco UTD SNORT IPS Engine Software 17.3.8a
Cisco Cisco UTD SNORT IPS Engine Software 17.6.6a
Cisco Cisco UTD SNORT IPS Engine Software 17.12.2
Cisco Cisco UTD SNORT IPS Engine Software 17.12.3
Cisco Cisco UTD SNORT IPS Engine Software 17.6.7
Cisco Cisco UTD SNORT IPS Engine Software 17.12.3a
Cisco Cisco UTD SNORT IPS Engine Software 17.12.4
Cisco Cisco UTD SNORT IPS Engine Software 17.6.8
Cisco Cisco UTD SNORT IPS Engine Software 17.6.8a
Cisco Cisco UTD SNORT IPS Engine Software 17.12.4a
Cisco Cisco UTD SNORT IPS Engine Software 17.15.2c
Cisco Cisco UTD SNORT IPS Engine Software 17.12.4b
Cisco Cisco UTD SNORT IPS Engine Software 17.15.2a
Cisco Cisco UTD SNORT IPS Engine Software 17.12.5
Cisco Cisco UTD SNORT IPS Engine Software 17.15.3a
Cisco Cisco UTD SNORT IPS Engine Software 17.15.3
Cisco Cisco UTD SNORT IPS Engine Software 17.12.5b
Cisco Cisco UTD SNORT IPS Engine Software 17.15.4

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH

{
    "lastseen": "",
    "description": "Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the disclosure of possible sensitive data or cause the Snort 3 Detection Engine to crash.\r\n\r\nThis vulnerability is due to an error in the logic of buffer handling when the MIME fields of the HTTP header are parsed. This can result in a buffer under-read. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to induce one of two possible outcomes: the unexpected restarting of the Snort 3 Detection Engine, which could cause a denial of service (DoS) condition, or information disclosure of sensitive information in the Snort 3 data stream. Due to the under-read condition, it is possible that sensitive information that is not valid connection data could be returned.",
    "published": "2025-10-15T16:17:31.374Z",
    "modified": "2025-10-15T16:17:31.374Z",
    "type": "cve",
    "title": "Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH",
    "id": "CVE-2025-20359",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Cyber Vision 3.0.0\nCisco Cisco Cyber Vision 3.0.2\nCisco Cisco Cyber Vision 3.0.3\nCisco Cisco Cyber Vision 3.0.1\nCisco Cisco Cyber Vision 3.1.0\nCisco Cisco Cyber Vision 3.0.4\nCisco Cisco Cyber Vision 3.1.1\nCisco Cisco Cyber Vision 3.1.2\nCisco Cisco Cyber Vision 3.2.0\nCisco Cisco Cyber Vision 3.0.5\nCisco Cisco Cyber Vision 3.2.1\nCisco Cisco Cyber Vision 3.0.6\nCisco Cisco Cyber Vision 3.2.2\nCisco Cisco Cyber Vision 3.2.3\nCisco Cisco Cyber Vision 3.2.4\nCisco Cisco Cyber Vision 4.0.0\nCisco Cisco Cyber Vision 4.0.1\nCisco Cisco Cyber Vision 4.0.2\nCisco Cisco Cyber Vision 4.0.3\nCisco Cisco Cyber Vision 4.1.0\nCisco Cisco Cyber Vision 4.1.1\nCisco Cisco Cyber Vision 4.1.2\nCisco Cisco Cyber Vision 4.1.3\nCisco Cisco Cyber Vision 4.1.4\nCisco Cisco Cyber Vision 4.2.0\nCisco Cisco Cyber Vision 4.2.1\nCisco Cisco Cyber Vision 4.1.5\nCisco Cisco Cyber Vision 4.2.2\nCisco Cisco Cyber Vision 4.2.X\nCisco Cisco Cyber Vision 4.2.3\nCisco Cisco Cyber Vision 4.2.4\nCisco Cisco Cyber Vision 4.2.6\nCisco Cisco Cyber Vision 4.1.6\nCisco Cisco Cyber Vision 4.3.0\nCisco Cisco Cyber Vision 4.3.1\nCisco Cisco Cyber Vision 4.3.2\nCisco Cisco Cyber Vision 4.3.3\nCisco Cisco Cyber Vision 4.4.0\nCisco Cisco Cyber Vision 4.4.1\nCisco Cisco Cyber Vision 4.4.2\nCisco Cisco Cyber Vision 4.4.3\nCisco Cisco Cyber Vision 4.1.7\nCisco Cisco Cyber Vision 5.0.0\nCisco Cisco Cyber Vision 5.0.1\nCisco Cisco Cyber Vision 5.0.2\nCisco Cisco Cyber Vision 5.1.0\nCisco Cisco Cyber Vision 5.1.1\nCisco Cisco Cyber Vision 5.1.2\nCisco Cisco Cyber Vision 5.1.3\nCisco Cisco Cyber Vision 5.2.0\nCisco Cisco Cyber Vision 5.2.1\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.1\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.1.1\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.0\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.1\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.7.0\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.2\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.1\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.3\nCisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.4\nCisco Cisco UTD SNORT IPS Engine Software 3.17.1S\nCisco Cisco UTD SNORT IPS Engine Software 16.12.3\nCisco Cisco UTD SNORT IPS Engine Software 16.12.4\nCisco Cisco UTD SNORT IPS Engine Software 17.3.1a\nCisco Cisco UTD SNORT IPS Engine Software 16.6.6\nCisco Cisco UTD SNORT IPS Engine Software 16.12.2\nCisco Cisco UTD SNORT IPS Engine Software 3.17.0S\nCisco Cisco UTD SNORT IPS Engine Software 16.6.5\nCisco Cisco UTD SNORT IPS Engine Software 17.2.1r\nCisco Cisco UTD SNORT IPS Engine Software 17.1.1\nCisco Cisco UTD SNORT IPS Engine Software 16.6.7a\nCisco Cisco UTD SNORT IPS Engine Software 16.6.1\nCisco Cisco UTD SNORT IPS Engine Software 16.12.1a\nCisco Cisco UTD SNORT IPS Engine Software 17.3.2\nCisco Cisco UTD SNORT IPS Engine Software 17.4.1a\nCisco Cisco UTD SNORT IPS Engine Software 16.12.5\nCisco Cisco UTD SNORT IPS Engine Software 17.5.1\nCisco Cisco UTD SNORT IPS Engine Software 16.6.9\nCisco Cisco UTD SNORT IPS Engine Software 17.3.3\nCisco Cisco UTD SNORT IPS Engine Software 17.5.1a\nCisco Cisco UTD SNORT IPS Engine Software 17.3.4\nCisco Cisco UTD SNORT IPS Engine Software 17.3.4a\nCisco Cisco UTD SNORT IPS Engine Software 17.4.2\nCisco Cisco UTD SNORT IPS Engine Software 17.4.1b\nCisco Cisco UTD SNORT IPS Engine Software 17.6.1a\nCisco Cisco UTD SNORT IPS Engine Software 16.6.10\nCisco Cisco UTD SNORT IPS Engine Software 17.7.1a\nCisco Cisco UTD SNORT IPS Engine Software 16.12.6\nCisco Cisco UTD SNORT IPS Engine Software 17.6.2\nCisco Cisco UTD SNORT IPS Engine Software 17.8.1a\nCisco Cisco UTD SNORT IPS Engine Software 16.12.7\nCisco Cisco UTD SNORT IPS Engine Software 17.3.5\nCisco Cisco UTD SNORT IPS Engine Software 17.6.3\nCisco Cisco UTD SNORT IPS Engine Software 17.6.3a\nCisco Cisco UTD SNORT IPS Engine Software 17.7.2\nCisco Cisco UTD SNORT IPS Engine Software 17.9.1a\nCisco Cisco UTD SNORT IPS Engine Software 17.6.4\nCisco Cisco UTD SNORT IPS Engine Software 17.3.6\nCisco Cisco UTD SNORT IPS Engine Software 16.12.8\nCisco Cisco UTD SNORT IPS Engine Software 17.3.7\nCisco Cisco UTD SNORT IPS Engine Software 17.9.2a\nCisco Cisco UTD SNORT IPS Engine Software 17.6.5\nCisco Cisco UTD SNORT IPS Engine Software 17.11.1a\nCisco Cisco UTD SNORT IPS Engine Software 17.12.1a\nCisco Cisco UTD SNORT IPS Engine Software 17.6.6\nCisco Cisco UTD SNORT IPS Engine Software 17.3.8\nCisco Cisco UTD SNORT IPS Engine Software 17.3.8a\nCisco Cisco UTD SNORT IPS Engine Software 17.6.6a\nCisco Cisco UTD SNORT IPS Engine Software 17.12.2\nCisco Cisco UTD SNORT IPS Engine Software 17.12.3\nCisco Cisco UTD SNORT IPS Engine Software 17.6.7\nCisco Cisco UTD SNORT IPS Engine Software 17.12.3a\nCisco Cisco UTD SNORT IPS Engine Software 17.12.4\nCisco Cisco UTD SNORT IPS Engine Software 17.6.8\nCisco Cisco UTD SNORT IPS Engine Software 17.6.8a\nCisco Cisco UTD SNORT IPS Engine Software 17.12.4a\nCisco Cisco UTD SNORT IPS Engine Software 17.15.2c\nCisco Cisco UTD SNORT IPS Engine Software 17.12.4b\nCisco Cisco UTD SNORT IPS Engine Software 17.15.2a\nCisco Cisco UTD SNORT IPS Engine Software 17.12.5\nCisco Cisco UTD SNORT IPS Engine Software 17.15.3a\nCisco Cisco UTD SNORT IPS Engine Software 17.15.3\nCisco Cisco UTD SNORT IPS Engine Software 17.12.5b\nCisco Cisco UTD SNORT IPS Engine Software 17.15.4",
    "sourceHref": "",
    "cvss": {
        "score": 6.5,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Cyber Vision",
    "version": "3.0.0",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability_CVE-2025-20359

Description

Basic Information

Affected Product

References

💭 Join the Security Discussion ❌ Cancel Reply