CVE-2023-20071

MEDIUM

5.8

CVSS Score

Published: November 1, 2023 at 05:07 PM UTC

Updated: August 11, 2026 at 07:37 PM UTC

7 products affected across 1 vendorSecure Firewall Threat DefenseCisco Cyber VisionMeraki Mx Security Appliance Firmware· also runs on 1 platform

Using Cisco Firepower Threat Defense Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Firepower Threat Defense Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.8

Exploit prediction

EPSS 0.5%

Description

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Cisco Cyber Vision · Cisco

95%

v < 4.1.33.0.0 3.0.1 3.0.2 3.0.3 3.0.4 3.0.5 3.0.6 3.1.0 3.1.1 3.1.2 3.2.0 3.2.1 3.2.2 3.2.3 3.2.4 4.0.0 4.0.1 4.0.2 4.0.3 4.1.0 4.1.1 4.1.2

Affected range stops below 4.1.3, so it looks safe — our inference, not a vendor statement

Meraki Mx Security Appliance Firmware · Cisco

95%

All versions

Secure Firewall Threat Defense · Cisco

95%

v < 6.4.0.176.5.0 ≤ v < 7.0.66.7.0 ≤ v < 7.0.57.1.0 ≤ v < 7.1.0.37.1.0 ≤ v < 7.2.47.2.0 ≤ v < 7.2.17.3.0 ≤ v < 7.3.1.2

snort-snort (environment)

Unified Threat Defense · Cisco

95%

17.11 ≤ v < 17.11.1a17.12 ≤ v < 17.12.1a17.3 ≤ v < 17.3.817.6 ≤ v < 17.6.617.9 ≤ v < 17.9.4

Affected range stops below 17.11.1a, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.12.1a, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.3.8, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.6.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.9.4, so it looks safe — our inference, not a vendor statement

Firepower Threat Defense · Cisco

60%

Affected range stops below 6.4.0.17, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.1.0.3, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.2.1, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.2.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3.1.2, so it looks safe — our inference, not a vendor statement

Umbrella · Cisco

60%

All versions

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

Snort · Snort

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOM

References (1)

Vendor Advisory

Source: [email protected]

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOM

CVSS

5.8MEDIUMcisco

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: CHANGED
Confidentiality: NONE
Integrity: LOW
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-1039NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card