CVE-2023-20071

MEDIUM5.8

Description

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

None

Affected products

Cisco / Cisco Cyber Vision4.1.2 – 4.1.2
Cisco / Cisco Cyber Vision3.0.4 – 3.0.4
Cisco / Cisco Cyber Vision3.0.0 – 3.0.0
Cisco / Cisco Cyber Vision3.0.1 – 3.0.1
Cisco / Cisco Cyber Vision3.0.2 – 3.0.2
Cisco / Cisco Cyber Vision3.0.3 – 3.0.3
Cisco / Cisco Cyber Vision3.0.5 – 3.0.5
Cisco / Cisco Cyber Vision3.0.6 – 3.0.6
Cisco / Cisco Cyber Vision3.1.0 – 3.1.0
Cisco / Cisco Cyber Vision3.1.2 – 3.1.2
Cisco / Cisco Cyber Vision3.1.1 – 3.1.1
Cisco / Cisco Cyber Vision3.2.3 – 3.2.3
Cisco / Cisco Cyber Vision3.2.1 – 3.2.1
Cisco / Cisco Cyber Vision3.2.4 – 3.2.4
Cisco / Cisco Cyber Vision3.2.0 – 3.2.0
Cisco / Cisco Cyber Vision3.2.2 – 3.2.2
Cisco / Cisco Cyber Vision4.0.0 – 4.0.0
Cisco / Cisco Cyber Vision4.0.1 – 4.0.1
Cisco / Cisco Cyber Vision4.0.2 – 4.0.2
Cisco / Cisco Cyber Vision4.0.3 – 4.0.3
Cisco / Cisco Cyber Vision4.1.0 – 4.1.0
Cisco / Cisco Cyber Vision4.1.1 – 4.1.1
Cisco / Cisco Firepower Threat Defense Software6.6.3 – 6.6.3
Cisco / Cisco Firepower Threat Defense Software6.6.4 – 6.6.4
Cisco / Cisco Firepower Threat Defense Software6.6.5 – 6.6.5
Cisco / Cisco Firepower Threat Defense Software6.6.5.1 – 6.6.5.1
Cisco / Cisco Firepower Threat Defense Software6.6.5.2 – 6.6.5.2
Cisco / Cisco Firepower Threat Defense Software6.6.7 – 6.6.7
Cisco / Cisco Firepower Threat Defense Software6.6.7.1 – 6.6.7.1
Cisco / Cisco Firepower Threat Defense Software6.4.0 – 6.4.0
Cisco / Cisco Firepower Threat Defense Software6.4.0.1 – 6.4.0.1
Cisco / Cisco Firepower Threat Defense Software6.4.0.3 – 6.4.0.3
Cisco / Cisco Firepower Threat Defense Software6.4.0.2 – 6.4.0.2
Cisco / Cisco Firepower Threat Defense Software6.4.0.4 – 6.4.0.4
Cisco / Cisco Firepower Threat Defense Software6.4.0.5 – 6.4.0.5
Cisco / Cisco Firepower Threat Defense Software6.4.0.6 – 6.4.0.6
Cisco / Cisco Firepower Threat Defense Software6.4.0.7 – 6.4.0.7
Cisco / Cisco Firepower Threat Defense Software6.4.0.8 – 6.4.0.8
Cisco / Cisco Firepower Threat Defense Software6.2.3 – 6.2.3
Cisco / Cisco Firepower Threat Defense Software6.4.0.10 – 6.4.0.10
Cisco / Cisco Firepower Threat Defense Software6.4.0.11 – 6.4.0.11
Cisco / Cisco Firepower Threat Defense Software6.4.0.12 – 6.4.0.12
Cisco / Cisco Firepower Threat Defense Software6.4.0.13 – 6.4.0.13
Cisco / Cisco Firepower Threat Defense Software6.4.0.14 – 6.4.0.14
Cisco / Cisco Firepower Threat Defense Software6.4.0.15 – 6.4.0.15
Cisco / Cisco Firepower Threat Defense Software6.4.0.16 – 6.4.0.16
Cisco / Cisco Firepower Threat Defense Software6.7.0 – 6.7.0
Cisco / Cisco Firepower Threat Defense Software6.7.0.1 – 6.7.0.1
Cisco / Cisco Firepower Threat Defense Software6.7.0.2 – 6.7.0.2
Cisco / Cisco Firepower Threat Defense Software6.7.0.3 – 6.7.0.3
Cisco / Cisco Firepower Threat Defense Software7.0.0 – 7.0.0
Cisco / Cisco Firepower Threat Defense Software7.0.0.1 – 7.0.0.1
Cisco / Cisco Firepower Threat Defense Software7.0.1 – 7.0.1
Cisco / Cisco Firepower Threat Defense Software7.0.1.1 – 7.0.1.1
Cisco / Cisco Firepower Threat Defense Software7.0.2 – 7.0.2
Cisco / Cisco Firepower Threat Defense Software7.0.2.1 – 7.0.2.1
Cisco / Cisco Firepower Threat Defense Software7.0.3 – 7.0.3
Cisco / Cisco Firepower Threat Defense Software7.0.4 – 7.0.4
Cisco / Cisco Firepower Threat Defense Software7.0.5 – 7.0.5
Cisco / Cisco Firepower Threat Defense Software7.1.0 – 7.1.0
Cisco / Cisco Firepower Threat Defense Software7.1.0.1 – 7.1.0.1
Cisco / Cisco Firepower Threat Defense Software7.1.0.2 – 7.1.0.2
Cisco / Cisco Firepower Threat Defense Software7.1.0.3 – 7.1.0.3
Cisco / Cisco Firepower Threat Defense Software7.2.0 – 7.2.0
Cisco / Cisco Firepower Threat Defense Software7.2.0.1 – 7.2.0.1
Cisco / Cisco Firepower Threat Defense Software7.2.1 – 7.2.1
Cisco / Cisco Firepower Threat Defense Software7.2.2 – 7.2.2
Cisco / Cisco Firepower Threat Defense Software7.2.3 – 7.2.3
Cisco / Cisco Firepower Threat Defense Software7.3.0 – 7.3.0
Cisco / Cisco Firepower Threat Defense Software7.3.1 – 7.3.1
Cisco / Cisco Firepower Threat Defense Software7.3.1.1 – 7.3.1.1
Cisco / Cisco Firepower Threat Defense Software6.4.0.9 – 6.4.0.9
Cisco / Cisco Firepower Threat Defense Software6.2.3.1 – 6.2.3.1
Cisco / Cisco Firepower Threat Defense Software6.2.3.2 – 6.2.3.2
Cisco / Cisco Firepower Threat Defense Software6.2.3.3 – 6.2.3.3
Cisco / Cisco Firepower Threat Defense Software6.2.3.4 – 6.2.3.4
Cisco / Cisco Firepower Threat Defense Software6.2.3.5 – 6.2.3.5
Cisco / Cisco Firepower Threat Defense Software6.2.3.6 – 6.2.3.6
Cisco / Cisco Firepower Threat Defense Software6.2.3.7 – 6.2.3.7
Cisco / Cisco Firepower Threat Defense Software6.2.3.8 – 6.2.3.8
Cisco / Cisco Firepower Threat Defense Software6.2.3.10 – 6.2.3.10
Cisco / Cisco Firepower Threat Defense Software6.2.3.11 – 6.2.3.11
Cisco / Cisco Firepower Threat Defense Software6.2.3.9 – 6.2.3.9
Cisco / Cisco Firepower Threat Defense Software6.2.3.12 – 6.2.3.12
Cisco / Cisco Firepower Threat Defense Software6.2.3.13 – 6.2.3.13
Cisco / Cisco Firepower Threat Defense Software6.2.3.14 – 6.2.3.14
Cisco / Cisco Firepower Threat Defense Software6.2.3.15 – 6.2.3.15
Cisco / Cisco Firepower Threat Defense Software6.2.3.16 – 6.2.3.16
Cisco / Cisco Firepower Threat Defense Software6.2.3.17 – 6.2.3.17
Cisco / Cisco Firepower Threat Defense Software6.2.3.18 – 6.2.3.18
Cisco / Cisco Firepower Threat Defense Software6.6.0 – 6.6.0
Cisco / Cisco Firepower Threat Defense Software6.6.0.1 – 6.6.0.1
Cisco / Cisco Firepower Threat Defense Software6.6.1 – 6.6.1
Cisco / Cisco Umbrella Insights Virtual ApplianceN/A – N/A
Cisco / Cisco UTD SNORT IPS Engine Software16.12.1a – 16.12.1a
Cisco / Cisco UTD SNORT IPS Engine Software16.12.2 – 16.12.2
Cisco / Cisco UTD SNORT IPS Engine Software16.12.3 – 16.12.3
Cisco / Cisco UTD SNORT IPS Engine Software16.12.4 – 16.12.4
Cisco / Cisco UTD SNORT IPS Engine Software16.12.5 – 16.12.5
Cisco / Cisco UTD SNORT IPS Engine Software16.12.6 – 16.12.6
Cisco / Cisco UTD SNORT IPS Engine Software16.12.7 – 16.12.7
Cisco / Cisco UTD SNORT IPS Engine Software16.12.8 – 16.12.8
Cisco / Cisco UTD SNORT IPS Engine Software16.6.1 – 16.6.1
Cisco / Cisco UTD SNORT IPS Engine Software16.6.5 – 16.6.5
Cisco / Cisco UTD SNORT IPS Engine Software16.6.6 – 16.6.6
Cisco / Cisco UTD SNORT IPS Engine Software16.6.7a – 16.6.7a
Cisco / Cisco UTD SNORT IPS Engine Software16.6.9 – 16.6.9
Cisco / Cisco UTD SNORT IPS Engine Software16.6.10 – 16.6.10
Cisco / Cisco UTD SNORT IPS Engine Software17.1.1 – 17.1.1
Cisco / Cisco UTD SNORT IPS Engine Software17.2.1r – 17.2.1r
Cisco / Cisco UTD SNORT IPS Engine Software17.3.1a – 17.3.1a
Cisco / Cisco UTD SNORT IPS Engine Software17.3.2 – 17.3.2
Cisco / Cisco UTD SNORT IPS Engine Software17.3.3 – 17.3.3
Cisco / Cisco UTD SNORT IPS Engine Software17.3.4a – 17.3.4a
Cisco / Cisco UTD SNORT IPS Engine Software17.3.6 – 17.3.6
Cisco / Cisco UTD SNORT IPS Engine Software17.3.5 – 17.3.5
Cisco / Cisco UTD SNORT IPS Engine Software17.3.7 – 17.3.7
Cisco / Cisco UTD SNORT IPS Engine Software3.17.0S – 3.17.0S
Cisco / Cisco UTD SNORT IPS Engine Software3.17.1S – 3.17.1S
Cisco / Cisco UTD SNORT IPS Engine Software17.4.1a – 17.4.1a
Cisco / Cisco UTD SNORT IPS Engine Software17.4.2 – 17.4.2
Cisco / Cisco UTD SNORT IPS Engine Software17.4.1b – 17.4.1b
Cisco / Cisco UTD SNORT IPS Engine Software17.5.1a – 17.5.1a
Cisco / Cisco UTD SNORT IPS Engine Software17.6.1a – 17.6.1a
Cisco / Cisco UTD SNORT IPS Engine Software17.6.2 – 17.6.2
Cisco / Cisco UTD SNORT IPS Engine Software17.6.3a – 17.6.3a
Cisco / Cisco UTD SNORT IPS Engine Software17.6.4 – 17.6.4
Cisco / Cisco UTD SNORT IPS Engine Software17.6.5 – 17.6.5
Cisco / Cisco UTD SNORT IPS Engine Software17.7.1a – 17.7.1a
Cisco / Cisco UTD SNORT IPS Engine Software17.7.2 – 17.7.2
Cisco / Cisco UTD SNORT IPS Engine Software17.10.1a – 17.10.1a
Cisco / Cisco UTD SNORT IPS Engine Software17.9.1a – 17.9.1a
Cisco / Cisco UTD SNORT IPS Engine Software17.9.2a – 17.9.2a
Cisco / Cisco UTD SNORT IPS Engine Software17.9.3a – 17.9.3a
Cisco / Cisco UTD SNORT IPS Engine Software17.8.1a – 17.8.1a
Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.2 – Fuji-16.9.2
Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.4 – Fuji-16.9.4
Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.6 – Fuji-16.9.6
Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.3 – Fuji-16.9.3
Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.8 – Fuji-16.9.8
Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.5 – Fuji-16.9.5
Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.3 – Denali-16.3.3
Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.9 – Denali-16.3.9
Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.7 – Denali-16.3.7
Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.5 – Denali-16.3.5
Cisco / Cisco UTD SNORT IPS Engine SoftwareDenali-16.3.4 – Denali-16.3.4
Cisco / Cisco UTD SNORT IPS Engine SoftwareEverest-16.6.3 – Everest-16.6.3
Cisco / Cisco UTD SNORT IPS Engine SoftwareEverest-16.6.4 – Everest-16.6.4
Cisco / Cisco UTD SNORT IPS Engine SoftwareEverest-16.6.2 – Everest-16.6.2
Cisco / Cisco UTD SNORT IPS Engine SoftwareFuji-16.9.7 – Fuji-16.9.7
Cisco / cyber_vision4.1.3
Cisco / meraki_mx_security_appliance_firmware
Cisco / secure_firewall_threat_defense6.4.0.17
Cisco / unified_threat_defense17.3 – 17.3.8

References

VENDOR_ADVISORYhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOM

Updated 23m ago · 8 sources