CVE-2023-20071

State: Published
Severity: 5.8 Medium
Published: Nov 1, 2023
Updated: Aug 2, 2024
Reserved: Oct 27, 2022

Description

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

Scores

CVSS	Score	Vector	Source
3.1	5.8 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N	cisco

Weaknesses

CWE-1039 Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations

Affected Products

Product	Versions
Cisco Firepower Threat Defense SoftwareCisco	6.2.3Affected 6.2.3.1Affected 6.2.3.2Affected 6.2.3.3Affected 6.2.3.4Affected 6.2.3.5Affected 6.2.3.6Affected 6.2.3.7Affected 6.2.3.8Affected 6.2.3.10Affected 6.2.3.11Affected 6.2.3.9Affected 6.2.3.12Affected 6.2.3.13Affected 6.2.3.14Affected 6.2.3.15Affected 6.2.3.16Affected 6.2.3.17Affected 6.2.3.18Affected 6.6.0Affected 6.6.0.1Affected 6.6.1Affected 6.6.3Affected 6.6.4Affected 6.6.5Affected and 46 more versions
Cisco Umbrella Insights Virtual ApplianceCisco	N/AAffected
Cisco Cyber VisionCisco	3.0.4Affected 3.0.0Affected 3.0.1Affected 3.0.2Affected 3.0.3Affected 3.0.5Affected 3.0.6Affected 3.1.0Affected 3.1.2Affected 3.1.1Affected 3.2.3Affected 3.2.1Affected 3.2.4Affected 3.2.0Affected 3.2.2Affected 4.0.0Affected 4.0.1Affected 4.0.2Affected 4.0.3Affected 4.1.0Affected 4.1.1Affected 4.1.2Affected
Cisco UTD SNORT IPS Engine SoftwareCisco	16.12.1aAffected 16.12.2Affected 16.12.3Affected 16.12.4Affected 16.12.5Affected 16.12.6Affected 16.12.7Affected 16.12.8Affected 16.6.1Affected 16.6.5Affected 16.6.6Affected 16.6.7aAffected 16.6.9Affected 16.6.10Affected 17.1.1Affected 17.2.1rAffected 17.3.1aAffected 17.3.2Affected 17.3.3Affected 17.3.4aAffected 17.3.6Affected 17.3.5Affected 17.3.7Affected 3.17.0SAffected 3.17.1SAffected and 31 more versions

References

cisco-sa-snort-ftd-zXYtnjOM

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.