Security features bypass in Cisco Systems, Inc products - CVE-2023-20071
Published: November 3, 2023
Vulnerability identifier: #VU82708
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-20071
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to a flaw in the FTP module of the Snort detection engine. A remote attacker can send specially crafted FTP traffic, bypass FTP inspection and deliver a malicious payload.
Affected software
Cisco Meraki MX68WC
Catalyst 8500L Series Edge Platforms
Cloud Services Routers 1000V Series
Integrated Services Virtual Router
Cisco Meraki MX64
Cisco Meraki MX64W
Cisco Meraki MX65
Cisco Meraki MX65W
Cisco Meraki MX67
Cisco Meraki MX67C
Cisco Meraki MX68
Cisco Meraki MX75
Cisco Meraki MX84
Cisco Meraki MX85
Cisco Meraki MX95
Cisco Meraki MX100
Cisco Meraki MX105
Cisco Meraki MX250
Cisco Meraki MX400
Cisco Meraki MX450
Cisco Meraki MX600
Catalyst 8200 Series Edge Platforms
Catalyst 8000V Edge Software
4000 Series Integrated Services Routers
Cisco 1000 Series Integrated Services Routers
Catalyst 8300 Series Edge Platforms
Cisco Firewall Threat Defense (FTD)
Cisco Meraki MX67W
Cisco Meraki MX68W
Meraki MX Security Appliances
Cisco UTD Engine for IOS XE SD-WAN
Cisco UTD Snort IPS Engine Software for IOS XE
Cyber Vision
Umbrella Secure Internet Gateway
FirePOWER Services
Open Source Snort 2
Open Source Snort 3
Catalyst 8500L Series Edge Platforms
Cloud Services Routers 1000V Series
Integrated Services Virtual Router
Cisco Meraki MX64
Cisco Meraki MX64W
Cisco Meraki MX65
Cisco Meraki MX65W
Cisco Meraki MX67
Cisco Meraki MX67C
Cisco Meraki MX68
Cisco Meraki MX75
Cisco Meraki MX84
Cisco Meraki MX85
Cisco Meraki MX95
Cisco Meraki MX100
Cisco Meraki MX105
Cisco Meraki MX250
Cisco Meraki MX400
Cisco Meraki MX450
Cisco Meraki MX600
Catalyst 8200 Series Edge Platforms
Catalyst 8000V Edge Software
4000 Series Integrated Services Routers
Cisco 1000 Series Integrated Services Routers
Catalyst 8300 Series Edge Platforms
Cisco Firewall Threat Defense (FTD)
Cisco Meraki MX67W
Cisco Meraki MX68W
Meraki MX Security Appliances
Cisco UTD Engine for IOS XE SD-WAN
Cisco UTD Snort IPS Engine Software for IOS XE
Cyber Vision
Umbrella Secure Internet Gateway
FirePOWER Services
Open Source Snort 2
Open Source Snort 3
How to mitigate CVE-2023-20071
Install updates from vendor's website.
Cisco Firewall Threat Defense (FTD) - addressed in versions 6.4.0.17, 7.0.5, 7.0.6, 7.1.0.3, 7.2.1, 7.2.4
Meraki MX Security Appliances - addressed in versions 16.6.6, 17.0, 18.1
Cyber Vision - update to 4.1.3
Cisco UTD Engine for IOS XE SD-WAN - addressed in versions 17.3.8, 17.6.6, 17.9.4, 17.11.1a, 17.12.1a
Cisco UTD Snort IPS Engine Software for IOS XE - addressed in versions 17.3.8, 17.6.6, 17.9.4, 17.11.1a, 17.12.1a
Open Source Snort 3 - update to 3.1.32.0
Meraki MX Security Appliances - addressed in versions 16.6.6, 17.0, 18.1
Cyber Vision - update to 4.1.3
Cisco UTD Engine for IOS XE SD-WAN - addressed in versions 17.3.8, 17.6.6, 17.9.4, 17.11.1a, 17.12.1a
Cisco UTD Snort IPS Engine Software for IOS XE - addressed in versions 17.3.8, 17.6.6, 17.9.4, 17.11.1a, 17.12.1a
Open Source Snort 3 - update to 3.1.32.0