PT-2023-8663 · Cisco · Snort

Publicado 2023-11-01 · Atualizado 2024-02-06 · CVE-2023-20246

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Multiple Cisco products (affected versions not specified)

Description The issue is related to a logic error in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This occurs when the access control policies are being populated. An attacker could exploit this by establishing a connection to an affected device, potentially allowing them to bypass configured access control rules. The vulnerability is also associated with authentication bypass via spoofing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

BDU:2024-01408

CVE-2023-20246

Produtos afetados

Snort

Referências · 8

• https://t.me/cvenotify/70318 · Publicação no Telegram
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3acp-bypass-3bdR2BEh · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1719768430893506613 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-01408 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-20246 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-20246 · Nota de Segurança
• https://t.me/cibsecurity/73381 · Publicação no Telegram
• https://t.me/cvenotify/70077 · Publicação no Telegram