Vulnerabilities > CVE-2023-20246

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

snort

cisco

NVD

Published: 2023-11-01

Updated: 2024-02-06

Summary

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being populated. An attacker could exploit this vulnerability by establishing a connection to an affected device. A successful exploit could allow the attacker to bypass configured access control rules on the affected system.

Vulnerable Configurations

Part	Description	Count
Application	Snort Snort Snort 3.0.0.0 Snort Snort 3.1.0.100 Snort Snort 3.1.32.0	3
Application	Cisco Cisco Firepower Threat Defense 7.0.0 Cisco Firepower Threat Defense 7.0.0.1 Cisco Firepower Threat Defense 7.0.1 Cisco Firepower Threat Defense 7.0.1.1 Cisco Firepower Threat Defense 7.0.2 Cisco Firepower Threat Defense 7.0.2.1 Cisco Firepower Threat Defense 7.0.3 Cisco Firepower Threat Defense 7.0.4 Cisco Firepower Threat Defense 7.0.5 Cisco Firepower Threat Defense 7.0.6 Cisco Firepower Threat Defense 7.1.0 Cisco Firepower Threat Defense 7.1.0.0 Cisco Firepower Threat Defense 7.1.0.1 Cisco Firepower Threat Defense 7.1.0.2 Cisco Firepower Threat Defense 7.1.0.3 Cisco Firepower Threat Defense 7.2.0 Cisco Firepower Threat Defense 7.2.0.0 Cisco Firepower Threat Defense 7.2.0.1 Cisco Firepower Threat Defense 7.2.1 Cisco Firepower Threat Defense 7.2.2 Cisco Firepower Threat Defense 7.2.3 Cisco Firepower Threat Defense 7.2.4 Cisco Firepower Threat Defense 7.2.4.1 Cisco Firepower Threat Defense 7.2.5 Cisco Firepower Threat Defense 7.3.0 Cisco Firepower Threat Defense 7.3.1 Cisco Firepower Threat Defense 7.3.1.1	27
OS	Cisco Cisco IOS XE *	1

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3acp-bypass-3bdR2BEh

Vulnerabilities > CVE-2023-20246 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2023-20246"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2023-20246