Cisco Cisco UTD SNORT IPS Engine Software

Name: Cisco Cisco UTD SNORT IPS Engine Software
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical7high14medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-1285US	—	2.94% (87th)	—	no fix	2024-11-18	27 versions
CVE-2021-40114US	high7.5	2.47% (84th)	—	no fix	2021-10-27	—
CVE-2020-3299US	medium5.8	2.31% (83rd)	—	no fix	2020-10-21	—
CVE-2021-1236US	medium5.3	2.19% (82nd)	—	no fix	2021-01-13	—
CVE-2021-1224US	medium5.3	2.05% (81st)	—	no fix	2021-01-13	—
CVE-2021-1223US	high7.5	2.03% (81st)	—	no fix	2021-01-13	—
CVE-2021-1495US	medium5.3	1.73% (77th)	—	no fix	2021-04-29	—
CVE-2021-34749US	high8.6	1.68% (77th)	—	no fix	2021-08-18	—
CVE-2022-20685US	—	1.46% (73rd)	—	no fix	2024-11-15	44 versions
CVE-2021-1494US	—	1.10% (66th)	—	no fix	2024-11-15	30 versions
CVE-2026-20026US	—	0.67% (52nd)	—	no fix	2026-01-07	103 versions
CVE-2026-20218US	medium5.8	0.63% (50th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20027US	—	0.60% (48th)	—	no fix	2026-01-07	103 versions
CVE-2026-20221US	medium5.8	0.58% (47th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20019US	medium5.8	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20011US	medium5.8	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-76445US	medium5.3	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2023-20071US	medium5.8	0.52% (44th)	—	no fix	2023-11-01	57 versions
CVE-2026-20005US	—	0.52% (44th)	—	no fix	2026-03-04	62 versions
CVE-2026-20197US	medium5.8	0.50% (42nd)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20179US	medium5.8	0.50% (42nd)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20067US	—	0.48% (41st)	—	no fix	2026-03-04	71 versions
CVE-2026-20066US	—	0.48% (41st)	—	no fix	2026-03-04	71 versions
CVE-2025-20359US	critical9.1	0.48% (41st)	—	no fix	2025-10-15	65 versions
CVE-2026-20057US	—	0.46% (40th)	—	no fix	2026-03-04	27 versions
CVE-2026-20054US	—	0.46% (40th)	—	no fix	2026-03-04	103 versions
CVE-2026-76489US	medium5.8	0.46% (39th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20356US	high7.5	0.44% (38th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20236US	high7.5	0.44% (38th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20068US	—	0.44% (38th)	—	no fix	2026-03-04	71 versions
CVE-2026-20053US	—	0.44% (38th)	—	no fix	2026-03-04	29 versions
CVE-2024-20508US	medium6.5	0.42% (36th)	—	no fix	2024-09-25	17 versions
CVE-2026-20058US	—	0.41% (35th)	—	no fix	2026-03-04	30 versions
CVE-2026-20065US	—	0.39% (33rd)	—	no fix	2026-03-04	71 versions
CVE-2025-20360US	—	0.38% (32nd)	—	no fix	2025-10-15	—
CVE-2024-20363US	—	0.37% (30th)	—	no fix	2024-05-22	5 versions
CVE-2026-20043US	critical9.0	0.36% (30th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-76524US	high7.8OT elevated	0.18% (7th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20291US	high7.8	0.16% (5th)	—	no fix	2026-10-21	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write6 CVEs
CWE-693Protection Mechanism Failure4 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-128Wrap-around Error2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)18 CVEs
USCisco PSIRT (CSAF)15 CVEs
NLNCSC-NL (CSAF)13 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan