[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYeVVHHbXzeUl1y2x1H0fAPAQLara7rnISmn9WO_KyX8":3,"g5a-risk:CVE-2023-20071":189},{"success":4,"data":5,"meta":187},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":58,"references":59,"referencesCount":65,"weaknesses":66,"weaknessesCount":65,"isActivelyExploited":75,"cisaInfo":26,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":185,"notableEvents":186},"CVE-2023-20071","What is CVE-2023-20071?","Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.","Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the conf...","2023-11-01T18:15:09.09","2024-01-25T17:15:28.55",5.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","CHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"ykramarz@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00523,[33,33,33,33,33,33,33],"Medium",[37,42,46,48,51,54],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"cisco","firepower_threat_defense","*","cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",{"vendor":43,"product":43,"version":44,"criteria":45,"vulnerable":4},"snort","2.0","cpe:2.3:a:snort:snort:2.0:-:*:*:*:*:*:*",{"vendor":43,"product":43,"version":40,"criteria":47,"vulnerable":4},"cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*",{"vendor":38,"product":49,"version":40,"criteria":50,"vulnerable":4},"cyber_vision","cpe:2.3:a:cisco:cyber_vision:*:*:*:*:*:*:*:*",{"vendor":38,"product":52,"version":40,"criteria":53,"vulnerable":4},"unified_threat_defense","cpe:2.3:a:cisco:unified_threat_defense:*:*:*:*:*:*:*:*",{"vendor":38,"product":55,"version":56,"criteria":57,"vulnerable":4},"meraki_mx_security_appliance_firmware","-","cpe:2.3:o:cisco:meraki_mx_security_appliance_firmware:-:*:*:*:*:*:*:*",6,[60],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-snort-ftd-zXYtnjOM","Cisco",[64],"Vendor Advisory",1,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-1039","Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations","The product uses an automated mechanism such as machine learning to recognize complex data inputs (e.g. image or audio) as a particular concept or category, but it does not properly detect or handle inputs that have been modified or constructed in a way that causes the mechanism to detect a different, incorrect concept.","When techniques such as machine learning are used to automatically classify input streams, and those classifications are used for security-critical decisions, then any mistake in classification can introduce a vulnerability that allows attackers to cause the product to make the wrong security decision.  If the automated mechanism is not developed or \"trained\" with enough input data, then attackers may be able to craft malicious input that intentionally triggers the incorrect classification.\nTargeted technologies include, but are not necessarily limited to:\nFor example, an attacker might modify road signs or road surface markings to trick autonomous vehicles into misreading the sign\u002Fmarking and performing a dangerous action.","Incomplete","Class","Simple",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2023-20071? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-20071, a medium severity cyber security vulnerability from 2023. Multiple Cisco products are affected by a vulnerability i...","CVE-2023-20071, CVE-2023-20071 vulnerability, CVE-2023-20071 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, cisco security, snort security, firepower_threat_defense vulnerability, snort vulnerability, cyber_vision vulnerability, unified_threat_defense vulnerability, meraki_mx_security_appliance_firmware vulnerability","\u002Fwhat-is\u002Fcve-2023-20071",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-20071","Cybersecurity","CVE-2023-20071, CVE-2023-20071 vulnerability, CVE-2023-20071 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103,128,148,155,179],{"Operator":104,"Negate":26,"Nodes":105},"AND",[106,124],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109,112,116,120],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":111,"VersionEndIncluding":26},"C62E4A4C-EE6D-49B5-ADCC-21386CD9F2D9","6.4.0.17",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":114,"VersionEndExcluding":115,"VersionEndIncluding":26},"F2A381B6-2AEF-4A0F-A151-8C3CEBBA7AC2","6.5.0","7.0.6",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":26},"BB0ABE0D-B90E-45BD-8978-DD6EBC863EC6","7.1.0","7.2.4",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":26},"233409FB-3D8D-41A9-BEC6-8A0E758717ED","7.3.0","7.3.1.2",{"Operator":107,"Negate":26,"CPEMatch":125},[126],{"Vulnerable":26,"Criteria":45,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4C27CF59-184F-4FFD-9CE8-87F2589EB5AA",{"Operator":104,"Negate":26,"Nodes":129},[130,143],{"Operator":107,"Negate":26,"CPEMatch":131},[132,136,139],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":26},"7792398D-F563-4441-900D-ABFECAA884AF","6.7.0","7.0.5",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":138,"VersionEndIncluding":26},"0F64FDF4-9696-4FC8-9ADA-DF1727EF1A63","7.1.0.3",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":141,"VersionEndExcluding":142,"VersionEndIncluding":26},"F712E334-BA34-4D9C-9E72-DBEFCF9B0E66","7.2.0","7.2.1",{"Operator":107,"Negate":26,"CPEMatch":144},[145],{"Vulnerable":26,"Criteria":47,"MatchCriteriaID":146,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":147,"VersionEndIncluding":26},"B5D0C2A5-A925-475B-8B2F-F8E3F27C0876","3.1.32.0",{"Operator":26,"Negate":26,"Nodes":149},[150],{"Operator":107,"Negate":26,"CPEMatch":151},[152],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":153,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":154,"VersionEndIncluding":26},"CCA9E447-86A4-46AC-9D6B-55D6F8664488","4.1.3",{"Operator":26,"Negate":26,"Nodes":156},[157],{"Operator":107,"Negate":26,"CPEMatch":158},[159,163,167,171,175],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":161,"VersionEndExcluding":162,"VersionEndIncluding":26},"BE0EDFC9-F9CD-487F-AB5C-38E8340BF427","17.3","17.3.8",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":165,"VersionEndExcluding":166,"VersionEndIncluding":26},"85C85786-8BA2-4194-9A07-9F8E676E75C9","17.6","17.6.6",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":169,"VersionEndExcluding":170,"VersionEndIncluding":26},"B50A5D29-0995-469D-86B8-0C5473FC54FC","17.9","17.9.4",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":172,"VersionStartExcluding":26,"VersionStartIncluding":173,"VersionEndExcluding":174,"VersionEndIncluding":26},"0DB2D2F1-FB90-485D-B6B4-B6E0A9351C95","17.11","17.11.1a",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":176,"VersionStartExcluding":26,"VersionStartIncluding":177,"VersionEndExcluding":178,"VersionEndIncluding":26},"FC04A2AB-CAAA-4723-90FD-C35CED76E029","17.12","17.12.1a",{"Operator":26,"Negate":26,"Nodes":180},[181],{"Operator":107,"Negate":26,"CPEMatch":182},[183],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":184,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4C60FD7B-F41F-4307-B3F4-905E7B7C17AF",[],[],{"lastModified":11,"cacheTime":188,"version":44},1792372638613,{"score":190,"band":191,"action":192,"scoredAt":193},24,"Low","Monitor","2026-10-16T06:59:41.652333+00:00"]