NA

CVE-2023-20071

Published: 01/11/2023 Updated: 25/01/2024
CVSS v3 Base Score: 5.8 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote malicious user to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the malicious user to bypass FTP inspection and deliver a malicious payload.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firepower_threat_defense

cisco cyber vision

cisco unified threat defense

cisco meraki mx security appliance firmware -

Vendor Advisories

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system This vulnerability is due to a flaw in the FTP module of the Snort detection engine An attacker could exploit this vulnerability by sending crafted FTP t ...