CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20246

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being populated. An attacker could exploit this vulnerability by establishing a connection to an affected device. A successful exploit could allow the attacker to bypass configured access control rules on the affected system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.7%

CVSS Severity

CVSS v3 Score 5.8

References

Products affected by CVE-2023-20246

Cisco » Firepower Threat Defense » Version: 7.0.0

cpe:2.3:a:cisco:firepower_threat_defense:7.0.0
Cisco » Firepower Threat Defense » Version: 7.0.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1
Cisco » Firepower Threat Defense » Version: 7.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.1
Cisco » Firepower Threat Defense » Version: 7.0.1.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1
Cisco » Firepower Threat Defense » Version: 7.0.2

cpe:2.3:a:cisco:firepower_threat_defense:7.0.2
Cisco » Firepower Threat Defense » Version: 7.0.2.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1
Cisco » Firepower Threat Defense » Version: 7.0.3

cpe:2.3:a:cisco:firepower_threat_defense:7.0.3
Cisco » Firepower Threat Defense » Version: 7.0.4

cpe:2.3:a:cisco:firepower_threat_defense:7.0.4
Cisco » Firepower Threat Defense » Version: 7.0.5

cpe:2.3:a:cisco:firepower_threat_defense:7.0.5
Cisco » Firepower Threat Defense » Version: 7.0.6

cpe:2.3:a:cisco:firepower_threat_defense:7.0.6
Cisco » Firepower Threat Defense » Version: 7.0.6.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.1
Cisco » Firepower Threat Defense » Version: 7.1.0

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0
Cisco » Firepower Threat Defense » Version: 7.1.0.0

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.0
Cisco » Firepower Threat Defense » Version: 7.1.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1
Cisco » Firepower Threat Defense » Version: 7.1.0.2

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.2
Cisco » Firepower Threat Defense » Version: 7.1.0.3

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3
Cisco » Firepower Threat Defense » Version: 7.2.0

cpe:2.3:a:cisco:firepower_threat_defense:7.2.0
Cisco » Firepower Threat Defense » Version: 7.2.0.0

cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.0
Cisco » Firepower Threat Defense » Version: 7.2.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1
Cisco » Firepower Threat Defense » Version: 7.2.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.1
Cisco » Firepower Threat Defense » Version: 7.2.2

cpe:2.3:a:cisco:firepower_threat_defense:7.2.2
Cisco » Firepower Threat Defense » Version: 7.2.3

cpe:2.3:a:cisco:firepower_threat_defense:7.2.3
Cisco » Firepower Threat Defense » Version: 7.2.4

cpe:2.3:a:cisco:firepower_threat_defense:7.2.4
Cisco » Firepower Threat Defense » Version: 7.2.4.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.4.1
Cisco » Firepower Threat Defense » Version: 7.2.5

cpe:2.3:a:cisco:firepower_threat_defense:7.2.5
Cisco » Firepower Threat Defense » Version: 7.2.5.1

cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.1
Cisco » Firepower Threat Defense » Version: 7.2.5.2

cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.2
Cisco » Firepower Threat Defense » Version: 7.2.6

cpe:2.3:a:cisco:firepower_threat_defense:7.2.6
Cisco » Firepower Threat Defense » Version: 7.2.7

cpe:2.3:a:cisco:firepower_threat_defense:7.2.7
Cisco » Firepower Threat Defense » Version: 7.3.0

cpe:2.3:a:cisco:firepower_threat_defense:7.3.0
Cisco » Firepower Threat Defense » Version: 7.3.1

cpe:2.3:a:cisco:firepower_threat_defense:7.3.1
Cisco » Firepower Threat Defense » Version: 7.3.1.1

cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.1
Snort » Snort » Version: 3.0.0.0

cpe:2.3:a:snort:snort:3.0.0.0
Snort » Snort » Version: 3.1.0.100

cpe:2.3:a:snort:snort:3.1.0.100
Snort » Snort » Version: 3.1.32.0

cpe:2.3:a:snort:snort:3.1.32.0
Cisco » Ios Xe » Version: 17.12.1

cpe:2.3:o:cisco:ios_xe:17.12.1
Cisco » Ios Xe » Version: 17.12.1a

cpe:2.3:o:cisco:ios_xe:17.12.1a
Cisco » Ios Xe » Version: 17.12.1w

cpe:2.3:o:cisco:ios_xe:17.12.1w
Cisco » Ios Xe » Version: 17.12.1x

cpe:2.3:o:cisco:ios_xe:17.12.1x
Cisco » Ios Xe » Version: 17.12.1y

cpe:2.3:o:cisco:ios_xe:17.12.1y

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20246

Products

Pricing

Contact Us