---
id: CVE-2025-20360
title: Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerability
summary: >-
  Multiple Cisco products are affected by vulnerabilities in the HTTP
  Multipurpose Internet Mail Extensions (MIME) Decoder that could allow an
  unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak
  possible sensitive …
severity: medium
cvss: 5.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L'
cvssSource: vendor
vendor: Cisco
product: Cisco Firepower 1000 Series
affected:
  - utd_snort_ips_engine_software
  - cyber_vision
  - firepower_2100_series
  - firepower_1000_series
  - 3000_series_industrial_security_appliances_isa
  - firepower_9000_series
  - firepower_4100_series
  - secure_firewall_threat_defense_virtual
  - secure_firewall_3100_series
  - secure_firewall_4200_series
  - secure_firewall_1200_series
published: '2025-10-15'
updated: '2026-02-12'
sourceUpdated: '2026-02-12T18:38:13+00:00'
source: CSAF
sourceUrl: >-
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH
  - url: 'https://software.cisco.com'
tags:
  - csaf
  - vendor-advisory
  - cisco
epss: 0.00382
epssPercentile: 0.3059
ingestedAt: '2026-10-17T11:57:30.529Z'
---

## Overview

Multiple Cisco products are affected by vulnerabilities in the HTTP Multipurpose Internet Mail Extensions (MIME) Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak possible sensitive information or to restart.

For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

## Vendor advisories

- **cisco-sa-snort3-mime-vulns-tTL8PgVH** · Cisco · affected: Cisco UTD SNORT IPS Engine Software, Cisco Cyber Vision, Cisco Firepower 2100 Series, Cisco Firepower 1000 Series, Cisco 3000 Series Industrial Security Appliances (ISA), Cisco Firepower 9000 Series, … · updated 2026-02-12 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-tTL8PgVH)

**Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerabilities**. Released 2025-10-15, updated 2026-02-12.

Affected:

- Cisco UTD SNORT IPS Engine Software
- Cisco Cyber Vision
- Cisco Firepower 2100 Series
- Cisco Firepower 1000 Series
- Cisco 3000 Series Industrial Security Appliances (ISA)
- Cisco Firepower 9000 Series
- Cisco Firepower 4100 Series
- Cisco Secure Firewall Threat Defense Virtual
- Cisco Secure Firewall 3100 Series
- Cisco Secure Firewall 4200 Series
- Cisco Secure Firewall 1200 Series

## Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com