Multiple Cisco Products security bypass | CVE-2023-20071

NAME
__________
Multiple Cisco Products security bypass

Platforms Affected:
Cisco IOS XE
Cisco FirePOWER Services Software for ASA
Cisco Firepower Threat Defense (FTD) Software
Cisco Open Source Snort 2

Risk Level:
5.8

Exploitability:
Unproven

Consequences:
Bypass Security

DESCRIPTION
__________

Multiple Cisco Products could allow a remote attacker to bypass security restrictions, caused by a flaw in the FTP module of the Snort detection engine. By sending crafted FTP traffic, an attacker could exploit this vulnerability to bypass FTP inspection and deliver a malicious payload.

CVSS 3.0 Information
__________

Privileges Required:
None

User Interaction:
None

Scope:
Changed

Access Vector:
Network



A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

 To keep up to date follow us on the below channels.