Vulnerabilities > CVE-2023-20267 - Unspecified vulnerability in Cisco Firepower Threat Defense

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2023-11-01

Updated: 2024-01-25

Summary

A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This vulnerability exists because the configuration for IP geolocation rules is not parsed properly. An attacker could exploit this vulnerability by spoofing an IP address until they bypass the restriction. A successful exploit could allow the attacker to bypass location-based IP address restrictions.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Firepower Threat Defense 6.7.0 Cisco Firepower Threat Defense 6.7.0.1 Cisco Firepower Threat Defense 6.7.0.2 Cisco Firepower Threat Defense 6.7.0.3 Cisco Firepower Threat Defense 7.0.0 Cisco Firepower Threat Defense 7.0.0.1 Cisco Firepower Threat Defense 7.0.1 Cisco Firepower Threat Defense 7.0.1.1 Cisco Firepower Threat Defense 7.0.2 Cisco Firepower Threat Defense 7.0.2.1 Cisco Firepower Threat Defense 7.0.3 Cisco Firepower Threat Defense 7.0.4 Cisco Firepower Threat Defense 7.0.5 Cisco Firepower Threat Defense 7.0.6 Cisco Firepower Threat Defense 7.1.0 Cisco Firepower Threat Defense 7.1.0.0 Cisco Firepower Threat Defense 7.1.0.1 Cisco Firepower Threat Defense 7.1.0.2 Cisco Firepower Threat Defense 7.1.0.3 Cisco Firepower Threat Defense 7.2.0 Cisco Firepower Threat Defense 7.2.0.0 Cisco Firepower Threat Defense 7.2.0.1 Cisco Firepower Threat Defense 7.2.1 Cisco Firepower Threat Defense 7.2.2 Cisco Firepower Threat Defense 7.2.3 Cisco Firepower Threat Defense 7.2.4 Cisco Firepower Threat Defense 7.2.4.1 Cisco Firepower Threat Defense 7.2.5 Cisco Firepower Threat Defense 7.3.0 Cisco Firepower Threat Defense 7.3.1 Cisco Firepower Threat Defense 7.3.1.1	31

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdsnort3sip-bypass-LMz2ThKn