Към съдържанието
Търсене

CVE-2023-20071: Cisco Firepower Threat Defense Software, логическа

5.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

    Описание

    Оригинално описание

    Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

    Засегнати продукти

    • Cisco Cisco Firepower Threat Defense Software: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; 6.2.3.6; 6.2.3.7; 6.2.3.8; 6.2.3.10; 6.2.3.11; 6.2.3.9; 6.2.3.12; 6.2.3.13; 6.2.3.14; 6.2.3.15; 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; 6.6.5.1; 6.6.5.2; 6.6.7; 6.6.7.1; 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; 6.4.0.6; 6.4.0.7; 6.4.0.8; 6.4.0.9; 6.4.0.10; 6.4.0.11; 6.4.0.12; 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; 7.0.4; 7.0.5; 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.3.0; 7.3.1; 7.3.1.1
    • Cisco Cisco Umbrella Insights Virtual Appliance: N/A
    • Cisco Cisco Cyber Vision: 3.0.4; 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.5; 3.0.6; 3.1.0; 3.1.2; 3.1.1; 3.2.3; 3.2.1; 3.2.4; 3.2.0; 3.2.2; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.1.0; 4.1.1; 4.1.2
    • Cisco Cisco UTD SNORT IPS Engine Software: 16.12.1a; 16.12.2; 16.12.3; 16.12.4; 16.12.5; 16.12.6; 16.12.7; 16.12.8; 16.6.1; 16.6.5; 16.6.6; 16.6.7a; 16.6.9; 16.6.10; 17.1.1; 17.2.1r; 17.3.1a; 17.3.2; 17.3.3; 17.3.4a; 17.3.6; 17.3.5; 17.3.7; 3.17.0S; 3.17.1S; 17.4.1a; 17.4.2; 17.4.1b; 17.5.1a; 17.6.1a; 17.6.2; 17.6.3a; 17.6.4; 17.6.5; 17.7.1a; 17.7.2; 17.10.1a; 17.9.1a; 17.9.2a; 17.9.3a; 17.8.1a; Fuji-16.9.2; Fuji-16.9.4; Fuji-16.9.6; Fuji-16.9.3; Fuji-16.9.7; Fuji-16.9.8; Fuji-16.9.5; Denali-16.3.3; Denali-16.3.9; Denali-16.3.7; Denali-16.3.5; Denali-16.3.4; Everest-16.6.3; Everest-16.6.4; Everest-16.6.2

    Вид слабост

    История

    • 1 ноември 2023 Публикувано

    Други уязвимости в Cisco Cisco Firepower Threat Defense Software

    Първоизточници

    CVE-2023-20071: Cisco Firepower Threat Defense Software, логическа | freedomonline.bg