CVE-2022-20922

Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to improper management of system resources when the Snort detection engine is processing SMB2 traffic. An attacker could exploit these vulnerabilities by sending a high rate of certain types of SMB2 packets through an affected device. A successful exploit could allow the attacker to trigger a reload of the Snort process, resulting in a DoS condition. Note: When the snort preserve-connection option is enabled for the Snort detection engine, a successful exploit could also allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network. The snort preserve-connection setting is enabled by default. See the Details ["#details"] section of this advisory for more information. Note: Only products that have Snort 3 configured are affected. Products that are configured with Snort 2 are not affected.

• CWE-244

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-smb-3nfhJtr
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-smb-3nfhJtr

Published

Nov 15, 2022

Last Modified

Jun 22, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20917A vulnerability in the Extensible Messaging and Presence Pro…4.3
• CVE-2022-20918A vulnerability in the Simple Network Management Protocol (S…7.5
• CVE-2022-20919A vulnerability in the processing of malformed Common Indust…7.5
• CVE-2022-2092The WooCommerce PDF Invoices & Packing Slips WordPress plugi…6.1
• CVE-2022-20920A vulnerability in the SSH implementation of Cisco IOS Softw…7.7
• CVE-2022-20921A vulnerability in the API implementation of Cisco ACI Multi…8.8
• CVE-2022-20923A vulnerability in the IPSec VPN Server authentication funct…9.8
• CVE-2022-20924A vulnerability in the Simple Network Management Protocol (S…6.5
• CVE-2022-20925A vulnerability in the web management interface of the Cisco…7.2
• CVE-2022-20926A vulnerability in the web management interface of the Cisco…8.8
• CVE-2022-20927A vulnerability in the SSL/TLS client of Cisco Adaptive Secu…6.5
• CVE-2022-20928A vulnerability in the authentication and authorization flow…5.8