{"id":"CVE-2025-20360","title":"Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerability","summary":"Multiple Cisco products are affected by vulnerabilities in the HTTP Multipurpose Internet Mail Extensions (MIME) Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak possible sensitive …","severity":"medium","cvss":5.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvssSource":"vendor","vendor":"Cisco","product":"Cisco Firepower 1000 Series","affected":["utd_snort_ips_engine_software","cyber_vision","firepower_2100_series","firepower_1000_series","3000_series_industrial_security_appliances_isa","firepower_9000_series","firepower_4100_series","secure_firewall_threat_defense_virtual","secure_firewall_3100_series","secure_firewall_4200_series","secure_firewall_1200_series"],"published":"2025-10-15","updated":"2026-02-12","sourceUpdated":"2026-02-12T18:38:13+00:00","source":"CSAF","sourceUrl":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH"},{"url":"https://software.cisco.com"}],"tags":["csaf","vendor-advisory","cisco"],"epss":0.00382,"epssPercentile":0.3059,"ingestedAt":"2026-10-17T11:57:30.529Z","slug":"CVE-2025-20360","body":"## Overview\n\nMultiple Cisco products are affected by vulnerabilities in the HTTP Multipurpose Internet Mail Extensions (MIME) Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak possible sensitive information or to restart.\r\n\r\nFor more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r\nCisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.\n\n## Vendor advisories\n\n- **cisco-sa-snort3-mime-vulns-tTL8PgVH** · Cisco · affected: Cisco UTD SNORT IPS Engine Software, Cisco Cyber Vision, Cisco Firepower 2100 Series, Cisco Firepower 1000 Series, Cisco 3000 Series Industrial Security Appliances (ISA), Cisco Firepower 9000 Series, … · updated 2026-02-12 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH)\n\n**Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerabilities**. Released 2025-10-15, updated 2026-02-12.\n\nAffected:\n\n- Cisco UTD SNORT IPS Engine Software\n- Cisco Cyber Vision\n- Cisco Firepower 2100 Series\n- Cisco Firepower 1000 Series\n- Cisco 3000 Series Industrial Security Appliances (ISA)\n- Cisco Firepower 9000 Series\n- Cisco Firepower 4100 Series\n- Cisco Secure Firewall Threat Defense Virtual\n- Cisco Secure Firewall 3100 Series\n- Cisco Secure Firewall 4200 Series\n- Cisco Secure Firewall 1200 Series\n\n## Remediation\n\nCisco has released software updates that address this vulnerability. https://software.cisco.com","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":31.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}