CVE-2023-20267CWE-284broken-access-control

CVE-2023-20267

Medium · published November 1, 2023

CVSS v3.1
4.0
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This vulnerability exists because the configuration for IP geolocation rules is not parsed properly. An attacker could exploit this vulnerability by spoofing an IP address until they bypass the restriction. A successful exploit could allow the attacker to bypass location-based IP address restrictions.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-11-01T22:15Z
Affected products (1)
ProductVersionsFixed in
cisco/secure_firewall_threat_defense≥ 6.7.0, ≤ 7.3.1.1—
References (2)
EPSS history
Timeline
  • 01 NOV 17:16Z
    A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions
    cvelistv5