Cisco CVEs — PoCs and detection rules¶
8 Cisco vulnerabilities with detection-only proof-of-concept code and Docker labs; 8 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-20439 — Cisco Smart Licensing | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-20223 — Cisco Secure Workload (formerly Tetration) | Critical (10.0) | Snort | ✅ |
| CVE-2024-20253 — Cisco Unified CM RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20432 — Cisco NDFC Command Injection | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20419 — Cisco Smart Install | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20440 — Cisco Smart Licensing | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20353 — Cisco ASA WebVPN | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20359 — Cisco ASA RCE | Medium (6.0) | Snort, YARA, Nginx, Apache | ✅ |