cbcvebase.
CVE-2023-20071
published 2023-11-01

CVE-2023-20071: Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the…

medium5.8CVSS 3.1
AVNACLPRNUINSCCNILAN
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

Affected

164 ranges· showing 25
VendorProductVersion rangeFixed in
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_cyber_vision——
ciscocisco_firepower_threat_defense_software——
ciscocisco_firepower_threat_defense_software——
ciscocisco_firepower_threat_defense_software——