CVE-2023-20071

Published: Nov 1, 2023Modified: Aug 11, 2026

5.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

Affected (14)

Products: Cisco: Secure Firewall Threat Defense, Cyber Vision, Unified Threat Defense, Meraki Mx Security Appliance Firmware

Cisco

4 products

Secure Firewall Threat Defense

Cyber Vision

Unified Threat Defense

Meraki Mx Security Appliance Firmware

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Secure Firewall Threat Defense	version < 6.4.0.17
Cisco Secure Firewall Threat Defense	6.5.0 ≤ version < 7.0.6
Cisco Secure Firewall Threat Defense	7.1.0 ≤ version < 7.2.4
Cisco Secure Firewall Threat Defense	7.3.0 ≤ version < 7.3.1.2

Running on/with	Platform Versions
Snort Snort	Version 2.0

Configuration B

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Secure Firewall Threat Defense	6.7.0 ≤ version < 7.0.5
Cisco Secure Firewall Threat Defense	7.1.0 ≤ version < 7.1.0.3
Cisco Secure Firewall Threat Defense	7.2.0 ≤ version < 7.2.1

Running on/with	Platform Versions
Snort Snort	version < 3.1.32.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Cyber Vision	version < 4.1.3

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Threat Defense	17.11 ≤ version < 17.11.1a
Cisco Unified Threat Defense	17.12 ≤ version < 17.12.1a
Cisco Unified Threat Defense	17.3 ≤ version < 17.3.8
Cisco Unified Threat Defense	17.6 ≤ version < 17.6.6
Cisco Unified Threat Defense	17.9 ≤ version < 17.9.4

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Meraki Mx Security Appliance Firmware	All versions

Related CWEs

CWE-1039

Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations

The product uses an automated mechanism such as machine learning to recognize complex data inputs (e.g. image or audio) as a particular concept or category, but it does not properly detect or handle inputs that have been modified or constructed in a way that causes the mechanism to detect a different, incorrect concept.

References (2)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOM

Source: psirt@cisco.com

Vendor Advisory

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOM

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.