CVE-2023-20071

Summary

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Firepower Threat Defense Software6.2.3affected
CiscoCisco Firepower Threat Defense Software6.2.3.1affected
CiscoCisco Firepower Threat Defense Software6.2.3.2affected
CiscoCisco Firepower Threat Defense Software6.2.3.3affected
CiscoCisco Firepower Threat Defense Software6.2.3.4affected
CiscoCisco Firepower Threat Defense Software6.2.3.5affected
CiscoCisco Firepower Threat Defense Software6.2.3.6affected
CiscoCisco Firepower Threat Defense Software6.2.3.7affected
CiscoCisco Firepower Threat Defense Software6.2.3.8affected
CiscoCisco Firepower Threat Defense Software6.2.3.10affected
CiscoCisco Firepower Threat Defense Software6.2.3.11affected
CiscoCisco Firepower Threat Defense Software6.2.3.9affected
CiscoCisco Firepower Threat Defense Software6.2.3.12affected
CiscoCisco Firepower Threat Defense Software6.2.3.13affected
CiscoCisco Firepower Threat Defense Software6.2.3.14affected
CiscoCisco Firepower Threat Defense Software6.2.3.15affected
CiscoCisco Firepower Threat Defense Software6.2.3.16affected
CiscoCisco Firepower Threat Defense Software6.2.3.17affected
CiscoCisco Firepower Threat Defense Software6.2.3.18affected
CiscoCisco Firepower Threat Defense Software6.6.0affected
CiscoCisco Firepower Threat Defense Software6.6.0.1affected
CiscoCisco Firepower Threat Defense Software6.6.1affected
CiscoCisco Firepower Threat Defense Software6.6.3affected
CiscoCisco Firepower Threat Defense Software6.6.4affected
CiscoCisco Firepower Threat Defense Software6.6.5affected
CiscoCisco Firepower Threat Defense Software6.6.5.1affected
CiscoCisco Firepower Threat Defense Software6.6.5.2affected
CiscoCisco Firepower Threat Defense Software6.6.7affected
CiscoCisco Firepower Threat Defense Software6.6.7.1affected
CiscoCisco Firepower Threat Defense Software6.4.0affected
CiscoCisco Firepower Threat Defense Software6.4.0.1affected
CiscoCisco Firepower Threat Defense Software6.4.0.3affected
CiscoCisco Firepower Threat Defense Software6.4.0.2affected
CiscoCisco Firepower Threat Defense Software6.4.0.4affected
CiscoCisco Firepower Threat Defense Software6.4.0.5affected
CiscoCisco Firepower Threat Defense Software6.4.0.6affected
CiscoCisco Firepower Threat Defense Software6.4.0.7affected
CiscoCisco Firepower Threat Defense Software6.4.0.8affected
CiscoCisco Firepower Threat Defense Software6.4.0.9affected
CiscoCisco Firepower Threat Defense Software6.4.0.10affected
CiscoCisco Firepower Threat Defense Software6.4.0.11affected
CiscoCisco Firepower Threat Defense Software6.4.0.12affected
CiscoCisco Firepower Threat Defense Software6.4.0.13affected
CiscoCisco Firepower Threat Defense Software6.4.0.14affected
CiscoCisco Firepower Threat Defense Software6.4.0.15affected
CiscoCisco Firepower Threat Defense Software6.4.0.16affected
CiscoCisco Firepower Threat Defense Software6.7.0affected
CiscoCisco Firepower Threat Defense Software6.7.0.1affected
CiscoCisco Firepower Threat Defense Software6.7.0.2affected
CiscoCisco Firepower Threat Defense Software6.7.0.3affected
CiscoCisco Firepower Threat Defense Software7.0.0affected
CiscoCisco Firepower Threat Defense Software7.0.0.1affected
CiscoCisco Firepower Threat Defense Software7.0.1affected
CiscoCisco Firepower Threat Defense Software7.0.1.1affected
CiscoCisco Firepower Threat Defense Software7.0.2affected
CiscoCisco Firepower Threat Defense Software7.0.2.1affected
CiscoCisco Firepower Threat Defense Software7.0.3affected
CiscoCisco Firepower Threat Defense Software7.0.4affected
CiscoCisco Firepower Threat Defense Software7.0.5affected
CiscoCisco Firepower Threat Defense Software7.1.0affected
CiscoCisco Firepower Threat Defense Software7.1.0.1affected
CiscoCisco Firepower Threat Defense Software7.1.0.2affected
CiscoCisco Firepower Threat Defense Software7.1.0.3affected
CiscoCisco Firepower Threat Defense Software7.2.0affected
CiscoCisco Firepower Threat Defense Software7.2.0.1affected
CiscoCisco Firepower Threat Defense Software7.2.1affected
CiscoCisco Firepower Threat Defense Software7.2.2affected
CiscoCisco Firepower Threat Defense Software7.2.3affected
CiscoCisco Firepower Threat Defense Software7.3.0affected
CiscoCisco Firepower Threat Defense Software7.3.1affected
CiscoCisco Firepower Threat Defense Software7.3.1.1affected
CiscoCisco Umbrella Insights Virtual ApplianceN/Aaffected
CiscoCisco Cyber Vision3.0.4affected
CiscoCisco Cyber Vision3.0.0affected
CiscoCisco Cyber Vision3.0.1affected
CiscoCisco Cyber Vision3.0.2affected
CiscoCisco Cyber Vision3.0.3affected
CiscoCisco Cyber Vision3.0.5affected
CiscoCisco Cyber Vision3.0.6affected
CiscoCisco Cyber Vision3.1.0affected
CiscoCisco Cyber Vision3.1.2affected
CiscoCisco Cyber Vision3.1.1affected
CiscoCisco Cyber Vision3.2.3affected
CiscoCisco Cyber Vision3.2.1affected
CiscoCisco Cyber Vision3.2.4affected
CiscoCisco Cyber Vision3.2.0affected
CiscoCisco Cyber Vision3.2.2affected
CiscoCisco Cyber Vision4.0.0affected
CiscoCisco Cyber Vision4.0.1affected
CiscoCisco Cyber Vision4.0.2affected
CiscoCisco Cyber Vision4.0.3affected
CiscoCisco Cyber Vision4.1.0affected
CiscoCisco Cyber Vision4.1.1affected
CiscoCisco Cyber Vision4.1.2affected
CiscoCisco UTD SNORT IPS Engine Software16.12.1aaffected
CiscoCisco UTD SNORT IPS Engine Software16.12.2affected
CiscoCisco UTD SNORT IPS Engine Software16.12.3affected
CiscoCisco UTD SNORT IPS Engine Software16.12.4affected
CiscoCisco UTD SNORT IPS Engine Software16.12.5affected
CiscoCisco UTD SNORT IPS Engine Software16.12.6affected
CiscoCisco UTD SNORT IPS Engine Software16.12.7affected
CiscoCisco UTD SNORT IPS Engine Software16.12.8affected
CiscoCisco UTD SNORT IPS Engine Software16.6.1affected
CiscoCisco UTD SNORT IPS Engine Software16.6.5affected
CiscoCisco UTD SNORT IPS Engine Software16.6.6affected
CiscoCisco UTD SNORT IPS Engine Software16.6.7aaffected
CiscoCisco UTD SNORT IPS Engine Software16.6.9affected
CiscoCisco UTD SNORT IPS Engine Software16.6.10affected
CiscoCisco UTD SNORT IPS Engine Software17.1.1affected
CiscoCisco UTD SNORT IPS Engine Software17.2.1raffected
CiscoCisco UTD SNORT IPS Engine Software17.3.1aaffected
CiscoCisco UTD SNORT IPS Engine Software17.3.2affected
CiscoCisco UTD SNORT IPS Engine Software17.3.3affected
CiscoCisco UTD SNORT IPS Engine Software17.3.4aaffected
CiscoCisco UTD SNORT IPS Engine Software17.3.6affected
CiscoCisco UTD SNORT IPS Engine Software17.3.5affected
CiscoCisco UTD SNORT IPS Engine Software17.3.7affected
CiscoCisco UTD SNORT IPS Engine Software3.17.0Saffected
CiscoCisco UTD SNORT IPS Engine Software3.17.1Saffected
CiscoCisco UTD SNORT IPS Engine Software17.4.1aaffected
CiscoCisco UTD SNORT IPS Engine Software17.4.2affected
CiscoCisco UTD SNORT IPS Engine Software17.4.1baffected
CiscoCisco UTD SNORT IPS Engine Software17.5.1aaffected
CiscoCisco UTD SNORT IPS Engine Software17.6.1aaffected
CiscoCisco UTD SNORT IPS Engine Software17.6.2affected
CiscoCisco UTD SNORT IPS Engine Software17.6.3aaffected
CiscoCisco UTD SNORT IPS Engine Software17.6.4affected
CiscoCisco UTD SNORT IPS Engine Software17.6.5affected
CiscoCisco UTD SNORT IPS Engine Software17.7.1aaffected
CiscoCisco UTD SNORT IPS Engine Software17.7.2affected
CiscoCisco UTD SNORT IPS Engine Software17.10.1aaffected
CiscoCisco UTD SNORT IPS Engine Software17.9.1aaffected
CiscoCisco UTD SNORT IPS Engine Software17.9.2aaffected
CiscoCisco UTD SNORT IPS Engine Software17.9.3aaffected
CiscoCisco UTD SNORT IPS Engine Software17.8.1aaffected
CiscoCisco UTD SNORT IPS Engine SoftwareFuji-16.9.2affected
CiscoCisco UTD SNORT IPS Engine SoftwareFuji-16.9.4affected
CiscoCisco UTD SNORT IPS Engine SoftwareFuji-16.9.6affected
CiscoCisco UTD SNORT IPS Engine SoftwareFuji-16.9.3affected
CiscoCisco UTD SNORT IPS Engine SoftwareFuji-16.9.7affected
CiscoCisco UTD SNORT IPS Engine SoftwareFuji-16.9.8affected
CiscoCisco UTD SNORT IPS Engine SoftwareFuji-16.9.5affected
CiscoCisco UTD SNORT IPS Engine SoftwareDenali-16.3.3affected
CiscoCisco UTD SNORT IPS Engine SoftwareDenali-16.3.9affected
CiscoCisco UTD SNORT IPS Engine SoftwareDenali-16.3.7affected
CiscoCisco UTD SNORT IPS Engine SoftwareDenali-16.3.5affected
CiscoCisco UTD SNORT IPS Engine SoftwareDenali-16.3.4affected
CiscoCisco UTD SNORT IPS Engine SoftwareEverest-16.6.3affected
CiscoCisco UTD SNORT IPS Engine SoftwareEverest-16.6.4affected
CiscoCisco UTD SNORT IPS Engine SoftwareEverest-16.6.2affected

Weaknesses

  • CWE-1039: Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations

ADP Enrichment

CVE Program Container

Additional References

References