Medium severity5.8NVD Advisory· Published Nov 1, 2023· Updated Aug 11, 2026

CVE-2023-20071

Description

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Cyber Vision
cpe:2.3:a:cisco:cyber_vision:*:*:*:*:*:*:*:*
Range: <4.1.3
Cisco Systems, Inc./Secure Firewall Threat Defense
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*
Range: <6.4.0.17
Cisco Systems, Inc./Unified Threat Defense
cpe:2.3:a:cisco:unified_threat_defense:*:*:*:*:*:*:*:*
Range: >=17.3,<17.3.8
Cisco Systems, Inc./Meraki Mx Security Appliance Firmware
cpe:2.3:o:cisco:meraki_mx_security_appliance_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Snort 3 Detection Enginellm-fuzzy
Cisco Systems, Inc./Cyber Vision Centercpe-rescue
Range: 3.0.4
Cisco Systems, Inc./Firepower Threat Defense Softwarecpe-rescue
Range: 6.2.3
Cisco Systems, Inc./Umbrella Insights Virtual Appliancecpe-rescue
Range: N/A
Cisco/Cisco UTD SNORT IPS Engine Softwarev5
Range: 16.12.1a

Patches

Vulnerability mechanics

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOMnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000