Impact
The CVE describes an issue involving improper calculation in Cisco’s Snort 3 software, classified under CWE‑682. This flaw could result in erroneous processing of inputs, which in turn may cause incorrect behavior or failure of the Snort engine. The impact is limited to the affected product’s operation and could manifest as malfunction, degraded performance, or unintended resource usage.
Affected Systems
Affected products are Cisco Cyber Vision, Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense (FTD) Software, and Cisco UTD SNORT IPS Engine Software. Version details have not been disclosed in the advisory.
Risk and Exploitability
The vulnerability carries a CVSS score of 7.5, indicating high severity. No EPSS data is provided, and the vulnerability is not listed in CISA KEV. The attack vector is not specified, but based on the description it is inferred that the flaw may be exploitable through malformed input to the Snort 3 engine. No public exploit has been reported, so the likelihood remains uncertain.
OpenCVE Enrichment