medium5.8
CVE-2023-20071
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the config…
Impact
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Secure Firewall Threat Defense | before 6.4.0.17 from 6.5.0 before 7.0.6 from 7.1.0 before 7.2.4 from 7.3.0 before 7.3.1.2 from 6.7.0 before 7.0.5 from 7.1.0 before 7.1.0.3 |
| Cisco | Cyber Vision | before 4.1.3 |
| Cisco | Unified Threat Defense | from 17.3 before 17.3.8 from 17.6 before 17.6.6 from 17.9 before 17.9.4 from 17.11 before 17.11.1a from 17.12 before 17.12.1a |
| Cisco | Meraki Mx Security Appliance Firmware | All versions |