# CVE-2023-20071 ## Summary - **CVE ID:** CVE-2023-20071 - **Severity:** MEDIUM - **CVSS Score:** 5.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) - **CWE:** CWE-1039 - **Published:** Nov 1, 2023 - **Last Modified:** Mar 13, 2026 ## Description Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload. ## Affected Products - Cisco — Cisco Firepower Threat Defense Software (6.2.3) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.1) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.2) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.3) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.4) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.5) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.6) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.7) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.8) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.10) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.11) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.9) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.12) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.13) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.14) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.15) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.16) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.17) - Cisco — Cisco Firepower Threat Defense Software (6.2.3.18) - Cisco — Cisco Firepower Threat Defense Software (6.6.0) - Cisco — Cisco Firepower Threat Defense Software (6.6.0.1) - Cisco — Cisco Firepower Threat Defense Software (6.6.1) - Cisco — Cisco Firepower Threat Defense Software (6.6.3) - Cisco — Cisco Firepower Threat Defense Software (6.6.4) - Cisco — Cisco Firepower Threat Defense Software (6.6.5) - Cisco — Cisco Firepower Threat Defense Software (6.6.5.1) - Cisco — Cisco Firepower Threat Defense Software (6.6.5.2) - Cisco — Cisco Firepower Threat Defense Software (6.6.7) - Cisco — Cisco Firepower Threat Defense Software (6.6.7.1) - Cisco — Cisco Firepower Threat Defense Software (6.4.0) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.1) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.3) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.2) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.4) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.5) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.6) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.7) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.8) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.9) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.10) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.11) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.12) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.13) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.14) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.15) - Cisco — Cisco Firepower Threat Defense Software (6.4.0.16) - Cisco — Cisco Firepower Threat Defense Software (6.7.0) - Cisco — Cisco Firepower Threat Defense Software (6.7.0.1) - Cisco — Cisco Firepower Threat Defense Software (6.7.0.2) - Cisco — Cisco Firepower Threat Defense Software (6.7.0.3) - Cisco — Cisco Firepower Threat Defense Software (7.0.0) - Cisco — Cisco Firepower Threat Defense Software (7.0.0.1) - Cisco — Cisco Firepower Threat Defense Software (7.0.1) - Cisco — Cisco Firepower Threat Defense Software (7.0.1.1) - Cisco — Cisco Firepower Threat Defense Software (7.0.2) - Cisco — Cisco Firepower Threat Defense Software (7.0.2.1) - Cisco — Cisco Firepower Threat Defense Software (7.0.3) - Cisco — Cisco Firepower Threat Defense Software (7.0.4) - Cisco — Cisco Firepower Threat Defense Software (7.0.5) - Cisco — Cisco Firepower Threat Defense Software (7.1.0) - Cisco — Cisco Firepower Threat Defense Software (7.1.0.1) - Cisco — Cisco Firepower Threat Defense Software (7.1.0.2) - Cisco — Cisco Firepower Threat Defense Software (7.1.0.3) - Cisco — Cisco Firepower Threat Defense Software (7.2.0) - Cisco — Cisco Firepower Threat Defense Software (7.2.0.1) - Cisco — Cisco Firepower Threat Defense Software (7.2.1) - Cisco — Cisco Firepower Threat Defense Software (7.2.2) - Cisco — Cisco Firepower Threat Defense Software (7.2.3) - Cisco — Cisco Firepower Threat Defense Software (7.3.0) - Cisco — Cisco Firepower Threat Defense Software (7.3.1) - Cisco — Cisco Firepower Threat Defense Software (7.3.1.1) - Cisco — Cisco Umbrella Insights Virtual Appliance (N/A) - Cisco — Cisco Cyber Vision (3.0.4) - Cisco — Cisco Cyber Vision (3.0.0) - Cisco — Cisco Cyber Vision (3.0.1) - Cisco — Cisco Cyber Vision (3.0.2) - Cisco — Cisco Cyber Vision (3.0.3) - Cisco — Cisco Cyber Vision (3.0.5) - Cisco — Cisco Cyber Vision (3.0.6) - Cisco — Cisco Cyber Vision (3.1.0) - Cisco — Cisco Cyber Vision (3.1.2) - Cisco — Cisco Cyber Vision (3.1.1) - Cisco — Cisco Cyber Vision (3.2.3) - Cisco — Cisco Cyber Vision (3.2.1) - Cisco — Cisco Cyber Vision (3.2.4) - Cisco — Cisco Cyber Vision (3.2.0) - Cisco — Cisco Cyber Vision (3.2.2) - Cisco — Cisco Cyber Vision (4.0.0) - Cisco — Cisco Cyber Vision (4.0.1) - Cisco — Cisco Cyber Vision (4.0.2) - Cisco — Cisco Cyber Vision (4.0.3) - Cisco — Cisco Cyber Vision (4.1.0) - Cisco — Cisco Cyber Vision (4.1.1) - Cisco — Cisco Cyber Vision (4.1.2) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.2) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.3) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.4) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.5) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.6) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.7) - Cisco — Cisco UTD SNORT IPS Engine Software (16.12.8) - Cisco — Cisco UTD SNORT IPS Engine Software (16.6.1) - Cisco — Cisco UTD SNORT IPS Engine Software (16.6.5) - Cisco — Cisco UTD SNORT IPS Engine Software (16.6.6) - Cisco — Cisco UTD SNORT IPS Engine Software (16.6.7a) - Cisco — Cisco UTD SNORT IPS Engine Software (16.6.9) - Cisco — Cisco UTD SNORT IPS Engine Software (16.6.10) - Cisco — Cisco UTD SNORT IPS Engine Software (17.1.1) - Cisco — Cisco UTD SNORT IPS Engine Software (17.2.1r) - Cisco — Cisco UTD SNORT IPS Engine Software (17.3.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.3.2) - Cisco — Cisco UTD SNORT IPS Engine Software (17.3.3) - Cisco — Cisco UTD SNORT IPS Engine Software (17.3.4a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.3.6) - Cisco — Cisco UTD SNORT IPS Engine Software (17.3.5) - Cisco — Cisco UTD SNORT IPS Engine Software (17.3.7) - Cisco — Cisco UTD SNORT IPS Engine Software (3.17.0S) - Cisco — Cisco UTD SNORT IPS Engine Software (3.17.1S) - Cisco — Cisco UTD SNORT IPS Engine Software (17.4.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.4.2) - Cisco — Cisco UTD SNORT IPS Engine Software (17.4.1b) - Cisco — Cisco UTD SNORT IPS Engine Software (17.5.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.6.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.6.2) - Cisco — Cisco UTD SNORT IPS Engine Software (17.6.3a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.6.4) - Cisco — Cisco UTD SNORT IPS Engine Software (17.6.5) - Cisco — Cisco UTD SNORT IPS Engine Software (17.7.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.7.2) - Cisco — Cisco UTD SNORT IPS Engine Software (17.10.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.9.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.9.2a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.9.3a) - Cisco — Cisco UTD SNORT IPS Engine Software (17.8.1a) - Cisco — Cisco UTD SNORT IPS Engine Software (Fuji-16.9.2) - Cisco — Cisco UTD SNORT IPS Engine Software (Fuji-16.9.4) - Cisco — Cisco UTD SNORT IPS Engine Software (Fuji-16.9.6) - Cisco — Cisco UTD SNORT IPS Engine Software (Fuji-16.9.3) - Cisco — Cisco UTD SNORT IPS Engine Software (Fuji-16.9.7) - Cisco — Cisco UTD SNORT IPS Engine Software (Fuji-16.9.8) - Cisco — Cisco UTD SNORT IPS Engine Software (Fuji-16.9.5) - Cisco — Cisco UTD SNORT IPS Engine Software (Denali-16.3.3) - Cisco — Cisco UTD SNORT IPS Engine Software (Denali-16.3.9) - Cisco — Cisco UTD SNORT IPS Engine Software (Denali-16.3.7) - Cisco — Cisco UTD SNORT IPS Engine Software (Denali-16.3.5) - Cisco — Cisco UTD SNORT IPS Engine Software (Denali-16.3.4) - Cisco — Cisco UTD SNORT IPS Engine Software (Everest-16.6.3) - Cisco — Cisco UTD SNORT IPS Engine Software (Everest-16.6.4) - Cisco — Cisco UTD SNORT IPS Engine Software (Everest-16.6.2) ## References - [CNA](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOM) ## Exploitation Prediction (EPSS) - **EPSS Score:** 0.05% - **EPSS Percentile:** 14.6 --- _Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._