CVE-2023-20071

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

• Cisco Cyber Vision

  APP
  Cisco
  < 4.1.3

• Cisco Firepower Threat Defense

  APP
  Cisco
  6.5.0 – 7.0.6 (bez)7.1.0 – 7.2.4 (bez)7.3.0 – 7.3.1.2 (bez)< 6.4.0.176.7.0 – 7.0.5 (bez)7.1.0 – 7.1.0.3 (bez)7.2.0 – 7.2.1 (bez)

• Cisco Meraki Mx Security Appliance Firmware

  OS
  Cisco
  wszystkie wersje

• Cisco Unified Threat Defense

  APP
  Cisco
  17.9 – 17.9.4 (bez)17.3 – 17.3.8 (bez)17.6 – 17.6.6 (bez)17.11 – 17.11.1a (bez)17.12 – 17.12.1a (bez)

• Snort

  APP
  Snort
  2.0< 3.1.32.0