PT-2023-8663 · Cisco · Snort

Published 2023-11-01 · Updated 2024-02-06 · CVE-2023-20246

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Multiple Cisco products (affected versions not specified)

Description The issue is related to a logic error in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This occurs when the access control policies are being populated. An attacker could exploit this by establishing a connection to an affected device, potentially allowing them to bypass configured access control rules. The vulnerability is also associated with authentication bypass via spoofing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

BDU:2024-01408

CVE-2023-20246

Affected Products

Snort

References · 8

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3acp-bypass-3bdR2BEh · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01408 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20246 · Security Note
• https://t.me/cvenotify/70318 · Telegram Post
• https://twitter.com/CVEnew/status/1719768430893506613 · Twitter Post
• https://t.me/cibsecurity/73381 · Telegram Post
• https://t.me/cvenotify/70077 · Telegram Post