csirt@kutim:~/threat-intel/cve/CVE-2023-20071

Katalog CVE

CVSS 5.8 · Medium EPSS 0,52%

Kerentanan Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism pada cisco secure firewall threat defense, cisco cyber vision +2 lainnya. Skor CVSS 3.1 5.8 (Medium) menurut NVD.

Deskripsi (NVD)

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.

Rincian

Terbit di NVD
1 November 2023
Terakhir diubah
11 Agustus 2026
Status NVD
Modified
CVSS 3.1
5.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1039: Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism
EPSS (30 hari)
0,52% peluang dieksploitasi; lebih tinggi dari 42,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco secure firewall threat defense Semua versi sebelum 6.4.0.17
cisco secure firewall threat defense Versi 6.5.0 hingga sebelum 7.0.6
cisco secure firewall threat defense Versi 7.1.0 hingga sebelum 7.2.4
cisco secure firewall threat defense Versi 7.3.0 hingga sebelum 7.3.1.2
cisco secure firewall threat defense Versi 6.7.0 hingga sebelum 7.0.5
cisco secure firewall threat defense Versi 7.1.0 hingga sebelum 7.1.0.3
cisco secure firewall threat defense Versi 7.2.0 hingga sebelum 7.2.1
cisco cyber vision Semua versi sebelum 4.1.3
cisco unified threat defense Versi 17.3 hingga sebelum 17.3.8
cisco unified threat defense Versi 17.6 hingga sebelum 17.6.6
cisco unified threat defense Versi 17.9 hingga sebelum 17.9.4
cisco unified threat defense Versi 17.11 hingga sebelum 17.11.1a
cisco unified threat defense Versi 17.12 hingga sebelum 17.12.1a
cisco meraki mx security appliance firmware Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.