Lucene search

[email protected]CVE-2020-3367

HistoryNov 18, 2020 - 6:15 p.m.

CVE-2020-3367

2020-11-1818:15:12

CWE-78

[email protected]

web.nvd.nist.gov

cisco

secure web appliance

asyncos

vulnerability

command injection

privilege escalation

cisco secure web appliance

cve-2020-3367

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Security Appliance) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface and CLI. An attacker could exploit this vulnerability by authenticating to the affected device and injecting scripting commands in the scope of the log subscription subsystem. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root.

Affected configurations

NVD

Node

ciscoasyncosRange<11.7.2-011

ciscoasyncosRange11.8.0–11.8.2-009

ciscoasyncosRange12.0.0–12.0.2

ciscoasyncosRange12.5.0–12.5.1-011

CPENameOperatorVersion
cisco:asyncoscisco asyncoslt11.7.2-011
cisco:asyncoscisco asyncoslt11.8.2-009
cisco:asyncoscisco asyncoslt12.0.2
cisco:asyncoscisco asyncoslt12.5.1-011

CPE	Name	Operator	Version
cisco:asyncos	cisco asyncos	lt	11.7.2-011
cisco:asyncos	cisco asyncos	lt	11.8.2-009
cisco:asyncos	cisco asyncos	lt	12.0.2
cisco:asyncos	cisco asyncos	lt	12.5.1-011

CNA Affected

[
  {
    "product": "Cisco Web Security Appliance (WSA) ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-prv-esc-nPzWZrQj

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2020-3367

cisco1 prion1 nessus1 nvd1 cvelist1