Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2023-20071

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Firepower Threat Defense Software

  • 6.2.3affected
  • 6.2.3.1affected
  • 6.2.3.2affected
  • 6.2.3.3affected
  • 6.2.3.4affected
  • 6.2.3.5affected
  • 6.2.3.6affected
  • 6.2.3.7affected
  • 6.2.3.8affected
  • 6.2.3.10affected
  • 6.2.3.11affected
  • 6.2.3.9affected
  • 6.2.3.12affected
  • 6.2.3.13affected
  • 6.2.3.14affected
  • 6.2.3.15affected
  • 6.2.3.16affected
  • 6.2.3.17affected
  • 6.2.3.18affected
  • 6.6.0affected
  • 6.6.0.1affected
  • 6.6.1affected
  • 6.6.3affected
  • 6.6.4affected
  • 6.6.5affected
  • 6.6.5.1affected
  • 6.6.5.2affected
  • 6.6.7affected
  • 6.6.7.1affected
  • 6.4.0affected
  • 6.4.0.1affected
  • 6.4.0.3affected
  • 6.4.0.2affected
  • 6.4.0.4affected
  • 6.4.0.5affected
  • 6.4.0.6affected
  • 6.4.0.7affected
  • 6.4.0.8affected
  • 6.4.0.9affected
  • 6.4.0.10affected
  • 6.4.0.11affected
  • 6.4.0.12affected
  • 6.4.0.13affected
  • 6.4.0.14affected
  • 6.4.0.15affected
  • 6.4.0.16affected
  • 6.7.0affected
  • 6.7.0.1affected
  • 6.7.0.2affected
  • 6.7.0.3affected
  • 7.0.0affected
  • 7.0.0.1affected
  • 7.0.1affected
  • 7.0.1.1affected
  • 7.0.2affected
  • 7.0.2.1affected
  • 7.0.3affected
  • 7.0.4affected
  • 7.0.5affected
  • 7.1.0affected
  • 7.1.0.1affected
  • 7.1.0.2affected
  • 7.1.0.3affected
  • 7.2.0affected
  • 7.2.0.1affected
  • 7.2.1affected
  • 7.2.2affected
  • 7.2.3affected
  • 7.3.0affected
  • 7.3.1affected
  • 7.3.1.1affected

Cisco Cisco Umbrella Insights Virtual Appliance

  • N/Aaffected

Cisco Cisco Cyber Vision

  • 3.0.4affected
  • 3.0.0affected
  • 3.0.1affected
  • 3.0.2affected
  • 3.0.3affected
  • 3.0.5affected
  • 3.0.6affected
  • 3.1.0affected
  • 3.1.2affected
  • 3.1.1affected
  • 3.2.3affected
  • 3.2.1affected
  • 3.2.4affected
  • 3.2.0affected
  • 3.2.2affected
  • 4.0.0affected
  • 4.0.1affected
  • 4.0.2affected
  • 4.0.3affected
  • 4.1.0affected
  • 4.1.1affected
  • 4.1.2affected

Cisco Cisco UTD SNORT IPS Engine Software

  • 16.12.1aaffected
  • 16.12.2affected
  • 16.12.3affected
  • 16.12.4affected
  • 16.12.5affected
  • 16.12.6affected
  • 16.12.7affected
  • 16.12.8affected
  • 16.6.1affected
  • 16.6.5affected
  • 16.6.6affected
  • 16.6.7aaffected
  • 16.6.9affected
  • 16.6.10affected
  • 17.1.1affected
  • 17.2.1raffected
  • 17.3.1aaffected
  • 17.3.2affected
  • 17.3.3affected
  • 17.3.4aaffected
  • 17.3.6affected
  • 17.3.5affected
  • 17.3.7affected
  • 3.17.0Saffected
  • 3.17.1Saffected
  • 17.4.1aaffected
  • 17.4.2affected
  • 17.4.1baffected
  • 17.5.1aaffected
  • 17.6.1aaffected
  • 17.6.2affected
  • 17.6.3aaffected
  • 17.6.4affected
  • 17.6.5affected
  • 17.7.1aaffected
  • 17.7.2affected
  • 17.10.1aaffected
  • 17.9.1aaffected
  • 17.9.2aaffected
  • 17.9.3aaffected
  • 17.8.1aaffected
  • Fuji-16.9.2affected
  • Fuji-16.9.4affected
  • Fuji-16.9.6affected
  • Fuji-16.9.3affected
  • Fuji-16.9.7affected
  • Fuji-16.9.8affected
  • Fuji-16.9.5affected
  • Denali-16.3.3affected
  • Denali-16.3.9affected
  • Denali-16.3.7affected
  • Denali-16.3.5affected
  • Denali-16.3.4affected
  • Everest-16.6.3affected
  • Everest-16.6.4affected
  • Everest-16.6.2affected

References