Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-20246
HistoryNov 01, 2023 - 6:15 p.m.

Improper access control

2023-11-0118:15:00
PRIOn knowledge base
www.prio-n.com
4
cisco
vulnerability
bypass
access control
snort
logic error
remote attacker
nvd

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system.

This vulnerability is due to a logic error that occurs when the access control policies are being populated. An attacker could exploit this vulnerability by establishing a connection to an affected device. A successful exploit could allow the attacker to bypass configured access control rules on the affected system.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%