CVE-2023-20071
Medium
Description
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.
SeverityMedium
CVSS5.8
Exploit probability—
Product
Cisco Secure Firewall Threat Defense
PublishedNov 1, 2023
First seenNov 1, 2023
Weakness typeCWE-1039CWE-1039
How to fix
Update
- cisco secure_firewall_threat_defense6.4.0.17, 7.0.6, 7.2.4, 7.3.1.2, 7.0.5, 7.1.0.3, 7.2.1 or later
- cisco cyber_vision4.1.3 or later
- cisco unified_threat_defense17.3.8, 17.6.6, 17.9.4, 17.11.1a, 17.12.1a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure_firewall_threat_defense | v < 6.4.0.17, 6.5.0 ≤ v < 7.0.6, 7.1.0 ≤ v < 7.2.4, 7.3.0 ≤ v < 7.3.1.2, 6.7.0 ≤ v < 7.0.5, 7.1.0 ≤ v < 7.1.0.3, 7.2.0 ≤ v < 7.2.1 | 6.4.0.17, 7.0.6, 7.2.4, 7.3.1.2, 7.0.5, 7.1.0.3, 7.2.1 |
| cisco cyber_vision | v < 4.1.3 | 4.1.3 |
| cisco unified_threat_defense | 17.3 ≤ v < 17.3.8, 17.6 ≤ v < 17.6.6, 17.9 ≤ v < 17.9.4, 17.11 ≤ v < 17.11.1a, 17.12 ≤ v < 17.12.1a | 17.3.8, 17.6.6, 17.9.4, 17.11.1a, 17.12.1a |
| cisco meraki_mx_security_appliance_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.