CVE-2023-20071
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- EPSS probability
- 0.05%
- CWE
- CWE-1039
- Published
- 2023-11-01
- Last modified
- 2026-03-13
Affected products
- Cisco Cisco Firepower Threat Defense Software
- Cisco Cisco Firepower Threat Defense Software
- Cisco Cisco Firepower Threat Defense Software
- Cisco Cisco Firepower Threat Defense Software
- Cisco Cisco Firepower Threat Defense Software
- Cisco Cisco Firepower Threat Defense Software
- Cisco Cisco Firepower Threat Defense Software
- Cisco Cisco Firepower Threat Defense Software
Weakness type
Related vulnerabilities
- CVE-2025-3578 — Adversarial Input Handling Vulnerability in AiDex
- CVE-2025-26644 — Windows Hello Spoofing Vulnerability