Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-20246

Опубликовано: 01 нояб. 2023
Источник: nvd
CVSS3: 5.8
CVSS3: 5.3
EPSS Низкий

Описание

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system.

This vulnerability is due to a logic error that occurs when the access control policies are being populated. An attacker could exploit this vulnerability by establishing a connection to an affected device. A successful exploit could allow the attacker to bypass configured access control rules on the affected system.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*
Версия от 3.0.0 (включая) до 3.1.57.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.3.1.1 (включая)
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
Версия от 17.12 (включая) до 17.12.2 (исключая)

EPSS

Процентиль: 20%
0.00065
Низкий

5.8 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-290
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.8
ubuntu
больше 2 лет назад

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being populated. An attacker could exploit this vulnerability by establishing a connection to an affected device. A successful exploit could allow the attacker to bypass configured access control rules on the affected system.

CVSS3: 5.8
debian
больше 2 лет назад

Multiple Cisco products are affected by a vulnerability in Snort acces ...

CVSS3: 5.8
github
больше 2 лет назад

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being populated. An attacker could exploit this vulnerability by establishing a connection to an affected device. A successful exploit could allow the attacker to bypass configured access control rules on the affected system.

CVSS3: 5.8
fstec
больше 2 лет назад

Уязвимость функции контроля доступа системы обнаружения вторжений Snort, позволяющая нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 20%
0.00065
Низкий

5.8 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-290
NVD-CWE-noinfo