CVE-2026-20027
Full vulnerability record from the local CVENow database.
Description
Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer out-of-bounds read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to obtain sensitive information in the Snort 3 data stream.
Severity
MEDIUM
CVSS score
5.3
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2026-01-07 17:16:02.877000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
"id": "CVE-2026-20027",
"sourceIdentifier": "[email protected]",
"published": "2026-01-07T17:16:02.877",
"lastModified": "2026-10-26T21:10:00.170",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer out-of-bounds read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to obtain sensitive information in the Snort 3 data stream."
},
{
"lang": "es",
"value": "Múltiples productos Cisco están afectados por una vulnerabilidad en el procesamiento de solicitudes DCE/RPC que podría permitir a un atacante remoto no autenticado causar que el motor de detección Snort 3 filtre información sensible o se reinicie, lo que resultaría en una interrupción de la inspección de paquetes.\n\nEsta vulnerabilidad se debe a un error en la lógica de manejo de búfer al procesar solicitudes DCE/RPC, lo que puede resultar en una lectura fuera de límites del búfer. Un atacante podría explotar esta vulnerabilidad enviando un gran número de solicitudes DCE/RPC a través de una conexión establecida que es inspeccionada por Snort 3. Un exploit exitoso podría permitir al atacante obtener información sensible en el flujo de datos de Snort 3."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "7.0.0",
"status": "affected"
},
{
"version": "7.0.0.1",
"status": "affected"
},
{
"version": "7.0.1",
"status": "affected"
},
{
"version": "7.1.0",
"status": "affected"
},
{
"version": "7.0.1.1",
"status": "affected"
},
{
"version": "7.1.0.1",
"status": "affected"
},
{
"version": "7.0.2",
"status": "affected"
},
{
"version": "7.2.0",
"status": "affected"
},
{
"version": "7.0.2.1",
"status": "affected"
},
{
"version": "7.0.3",
"status": "affected"
},
{
"version": "7.1.0.2",
"status": "affected"
},
{
"version": "7.2.0.1",
"status": "affected"
},
{
"version": "7.0.4",
"status": "affected"
},
{
"version": "7.2.1",
"status": "affected"
},
{
"version": "7.0.5",
"status": "affected"
},
{
"version": "7.3.0",
"status": "affected"
},
{
"version": "7.2.2",
"status": "affected"
},
{
"version": "7.2.3",
"status": "affected"
},
{
"version": "7.3.1",
"status": "affected"
},
{
"version": "7.1.0.3",
"status": "affected"
},
{
"version": "7.2.4",
"status": "affected"
},
{
"version": "7.0.6",
"status": "affected"
},
{
"version": "7.2.5",
"status": "affected"
},
{
"version": "7.2.4.1",
"status": "affected"
},
{
"version": "7.3.1.1",
"status": "affected"
},
{
"version": "7.4.0",
"status": "affected"
},
{
"version": "7.0.6.1",
"status": "affected"
},
{
"version": "7.2.5.1",
"status": "affected"
},
{
"version": "7.4.1",
"status": "affected"
},
{
"version": "7.2.6",
"status": "affected"
},
{
"version": "7.0.6.2",
"status": "affected"
},
{
"version": "7.4.1.1",
"status": "affected"
},
{
"version": "7.2.7",
"status": "affected"
},
{
"version": "7.2.5.2",
"status": "affected"
},
{
"version": "7.3.1.2",
"status": "affected"
},
{
"version": "7.2.8",
"status": "affected"
},
{
"version": "7.6.0",
"status": "affected"
},
{
"version": "7.4.2",
"status": "affected"
},
{
"version": "7.2.8.1",
"status": "affected"
},
{
"version": "7.0.6.3",
"status": "affected"
},
{
"version": "7.4.2.1",
"status": "affected"
},
{
"version": "7.2.9",
"status": "affected"
},
{
"version": "7.0.7",
"status": "affected"
},
{
"version": "7.7.0",
"status": "affected"
},
{
"version": "7.4.2.2",
"status": "affected"
},
{
"version": "7.2.10",
"status": "affected"
},
{
"version": "7.6.1",
"status": "affected"
},
{
"version": "7.4.2.3",
"status": "affected"
},
{
"version": "7.0.8",
"status": "affected"
},
{
"version": "7.6.2",
"status": "affected"
},
{
"version": "7.7.10",
"status": "affected"
},
{
"version": "7.0.8.1",
"status": "affected"
},
{
"version": "7.6.2.1",
"status": "affected"
},
{
"version": "7.7.10.1",
"status": "affected"
},
{
"version": "7.4.2.4",
"status": "affected"
},
{
"version": "7.2.10.2",
"status": "affected"
},
{
"version": "7.4.3",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco UTD SNORT IPS Engine Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "3.17.1S",
"status": "affected"
},
{
"version": "16.12.3",
"status": "affected"
},
{
"version": "Fuji-16.9.5",
"status": "affected"
},
{
"version": "16.12.4",
"status": "affected"
},
{
"version": "17.3.1a",
"status": "affected"
},
{
"version": "16.6.6",
"status": "affected"
},
{
"version": "16.12.2",
"status": "affected"
},
{
"version": "Fuji-16.9.6",
"status": "affected"
},
{
"version": "3.17.0S",
"status": "affected"
},
{
"version": "Fuji-16.9.3",
"status": "affected"
},
{
"version": "Denali-16.3.7",
"status": "affected"
},
{
"version": "Fuji-16.9.2",
"status": "affected"
},
{
"version": "Fuji-16.9.4",
"status": "affected"
},
{
"version": "Everest-16.6.4",
"status": "affected"
},
{
"version": "Everest-16.6.3",
"status": "affected"
},
{
"version": "16.6.5",
"status": "affected"
},
{
"version": "Denali-16.3.5",
"status": "affected"
},
{
"version": "17.2.1r",
"status": "affected"
},
{
"version": "17.1.1",
"status": "affected"
},
{
"version": "Everest-16.6.2",
"status": "affected"
},
{
"version": "16.6.7a",
"status": "affected"
},
{
"version": "Denali-16.3.4",
"status": "affected"
},
{
"version": "16.6.1",
"status": "affected"
},
{
"version": "Denali-16.3.9",
"status": "affected"
},
{
"version": "Denali-16.3.3",
"status": "affected"
},
{
"version": "16.12.1a",
"status": "affected"
},
{
"version": "17.3.2",
"status": "affected"
},
{
"version": "17.4.1a",
"status": "affected"
},
{
"version": "16.12.5",
"status": "affected"
},
{
"version": "17.5.1",
"status": "affected"
},
{
"version": "Fuji-16.9.7",
"status": "affected"
},
{
"version": "16.6.9",
"status": "affected"
},
{
"version": "17.3.3",
"status": "affected"
},
{
"version": "17.5.1a",
"status": "affected"
},
{
"version": "17.3.4",
"status": "affected"
},
{
"version": "17.3.4a",
"status": "affected"
},
{
"version": "17.4.2",
"status": "affected"
},
{
"version": "17.4.1b",
"status": "affected"
},
{
"version": "17.6.1a",
"status": "affected"
},
{
"version": "16.6.10",
"status": "affected"
},
{
"version": "17.7.1a",
"status": "affected"
},
{
"version": "16.12.6",
"status": "affected"
},
{
"version": "Fuji-16.9.8",
"status": "affected"
},
{
"version": "17.6.2",
"status": "affected"
},
{
"version": "17.8.1a",
"status": "affected"
},
{
"version": "16.12.7",
"status": "affected"
},
{
"version": "17.3.5",
"status": "affected"
},
{
"version": "17.6.3",
"status": "affected"
},
{
"version": "17.6.3a",
"status": "affected"
},
{
"version": "17.7.2",
"status": "affected"
},
{
"version": "17.9.1a",
"status": "affected"
},
{
"version": "17.6.4",
"status": "affected"
},
{
"version": "17.10.1a",
"status": "affected"
},
{
"version": "17.3.6",
"status": "affected"
},
{
"version": "16.12.8",
"status": "affected"
},
{
"version": "17.3.7",
"status": "affected"
},
{
"version": "17.9.2a",
"status": "affected"
},
{
"version": "17.6.5",
"status": "affected"
},
{
"version": "17.11.1a",
"status": "affected"
},
{
"version": "17.9.3a",
"status": "affected"
},
{
"version": "17.12.1a",
"status": "affected"
},
{
"version": "17.9.4",
"status": "affected"
},
{
"version": "17.6.6",
"status": "affected"
},
{
"version": "17.3.8",
"status": "affected"
},
{
"version": "17.3.8a",
"status": "affected"
},
{
"version": "17.6.6a",
"status": "affected"
},
{
"version": "17.9.4a",
"status": "affected"
},
{
"version": "17.12.2",
"status": "affected"
},
{
"version": "17.13.1a",
"status": "affected"
},
{
"version": "17.9.5a",
"status": "affected"
},
{
"version": "17.12.3",
"status": "affected"
},
{
"version": "17.6.7",
"status": "affected"
},
{
"version": "17.14.1a",
"status": "affected"
},
{
"version": "17.12.4",
"status": "affected"
},
{
"version": "17.12.3a",
"status": "affected"
},
{
"version": "17.15.1a",
"status": "affected"
},
{
"version": "17.6.8",
"status": "affected"
},
{
"version": "17.9.6",
"status": "affected"
},
{
"version": "17.6.8a",
"status": "affected"
},
{
"version": "17.16.1a",
"status": "affected"
},
{
"version": "17.9.5e",
"status": "affected"
},
{
"version": "17.12.4a",
"status": "affected"
},
{
"version": "17.15.2c",
"status": "affected"
},
{
"version": "17.9.5f",
"status": "affected"
},
{
"version": "17.12.4b",
"status": "affected"
},
{
"version": "17.15.2a",
"status": "affected"
},
{
"version": "17.12.5",
"status": "affected"
},
{
"version": "17.17.1",
"status": "affected"
},
{
"version": "17.12.5a",
"status": "affected"
},
{
"version": "17.9.7a",
"status": "affected"
},
{
"version": "17.15.3a",
"status": "affected"
},
{
"version": "17.15.3",
"status": "affected"
},
{
"version": "17.12.5b",
"status": "affected"
},
{
"version": "17.12.5c",
"status": "affected"
},
{
"version": "17.15.4",
"status": "affected"
},
{
"version": "17.9.7b",
"status": "affected"
},
{
"version": "17.18.1",
"status": "affected"
},
{
"version": "17.18.1a",
"status": "affected"
},
{
"version": "17.12.6",
"status": "affected"
},
{
"version": "17.9.8",
"status": "affected"
},
{
"version": "17.15.4c",
"status": "affected"
},
{
"version": "17.12.5d",
"status": "affected"
},
{
"version": "17.18.2",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-01-07T16:50:48.278861Z",
"id": "CVE-2026-20027",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH",
"source": "[email protected]"
}
]
}