Lucene search

[email protected]CVE-2023-20215

HistoryAug 03, 2023 - 10:15 p.m.

CVE-2023-20215

2023-08-0322:15:11

CWE-202

[email protected]

web.nvd.nist.gov

cve-2023-20215

cisco

asyncos software

vulnerability

scanning engines

network security

unauthenticated

remote attacker

bypass rule

traffic

malicious traffic

http responses

nvd

5.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

JSON

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule, allowing traffic onto a network that should have been blocked.

This vulnerability is due to improper detection of malicious traffic when the traffic is encoded with a specific content format. An attacker could exploit this vulnerability by using an affected device to connect to a malicious server and receiving crafted HTTP responses. A successful exploit could allow the attacker to bypass an explicit block rule and receive traffic that should have been rejected by the device.

Affected configurations

NVD

Node

ciscoasyncosMatch11.7.0-406

ciscoasyncosMatch11.7.0-418

ciscoasyncosMatch11.7.1-006

ciscoasyncosMatch11.7.1-020

ciscoasyncosMatch11.7.1-049

ciscoasyncosMatch11.7.2-011

ciscoasyncosMatch11.8.0-414

ciscoasyncosMatch11.8.1-023

ciscoasyncosMatch11.8.3-018

ciscoasyncosMatch11.8.3-021

ciscoasyncosMatch12.0.1-268

ciscoasyncosMatch12.0.3-007

ciscoasyncosMatch12.5.1-011

ciscoasyncosMatch12.5.2-007

ciscoasyncosMatch12.5.4-005

ciscoasyncosMatch12.5.5-004

ciscoasyncosMatch14.0.2-012

ciscoasyncosMatch14.0.3-014

ciscoasyncosMatch14.0.4-005

ciscoasyncosMatch14.5.0-498

ciscoasyncosMatch14.5.1-008

ciscoasyncosMatch14.5.1-016

AND

ciscos195Match-

ciscos395Match-

ciscos695Match-

ciscoweb_security_appliance_s170Match-

ciscoweb_security_appliance_s190Match-

ciscoweb_security_appliance_s380Match-

ciscoweb_security_appliance_s390Match-

ciscoweb_security_appliance_s680Match-

ciscoweb_security_appliance_s690Match-

ciscoweb_security_appliance_s690xMatch-

CPENameOperatorVersion
cisco:asyncoscisco asyncoseq11.7.0-406
cisco:asyncoscisco asyncoseq11.7.0-418
cisco:asyncoscisco asyncoseq11.7.1-006
cisco:asyncoscisco asyncoseq11.7.1-020
cisco:asyncoscisco asyncoseq11.7.1-049
cisco:asyncoscisco asyncoseq11.7.2-011
cisco:asyncoscisco asyncoseq11.8.0-414
cisco:asyncoscisco asyncoseq11.8.1-023
cisco:asyncoscisco asyncoseq11.8.3-018
cisco:asyncoscisco asyncoseq11.8.3-021

CPE	Name	Operator	Version
cisco:asyncos	cisco asyncos	eq	11.7.0-406
cisco:asyncos	cisco asyncos	eq	11.7.0-418
cisco:asyncos	cisco asyncos	eq	11.7.1-006
cisco:asyncos	cisco asyncos	eq	11.7.1-020
cisco:asyncos	cisco asyncos	eq	11.7.1-049
cisco:asyncos	cisco asyncos	eq	11.7.2-011
cisco:asyncos	cisco asyncos	eq	11.8.0-414
cisco:asyncos	cisco asyncos	eq	11.8.1-023
cisco:asyncos	cisco asyncos	eq	11.8.3-018
cisco:asyncos	cisco asyncos	eq	11.8.3-021

Rows per page:

1-10 of 221

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Web Appliance",
    "versions": [
      {
        "version": "11.7.0-406",
        "status": "affected"
      },
      {
        "version": "11.7.0-418",
        "status": "affected"
      },
      {
        "version": "11.7.1-049",
        "status": "affected"
      },
      {
        "version": "11.7.1-006",
        "status": "affected"
      },
      {
        "version": "11.7.1-020",
        "status": "affected"
      },
      {
        "version": "11.7.2-011",
        "status": "affected"
      },
      {
        "version": "11.8.0-414",
        "status": "affected"
      },
      {
        "version": "11.8.1-023",
        "status": "affected"
      },
      {
        "version": "11.8.3-018",
        "status": "affected"
      },
      {
        "version": "11.8.3-021",
        "status": "affected"
      },
      {
        "version": "12.0.1-268",
        "status": "affected"
      },
      {
        "version": "12.0.3-007",
        "status": "affected"
      },
      {
        "version": "12.5.2-007",
        "status": "affected"
      },
      {
        "version": "12.5.1-011",
        "status": "affected"
      },
      {
        "version": "12.5.4-005",
        "status": "affected"
      },
      {
        "version": "12.5.5-004",
        "status": "affected"
      },
      {
        "version": "14.5.0-498",
        "status": "affected"
      },
      {
        "version": "14.5.1-016",
        "status": "affected"
      },
      {
        "version": "14.0.3-014",
        "status": "affected"
      },
      {
        "version": "14.0.2-012",
        "status": "affected"
      },
      {
        "version": "14.0.4-005",
        "status": "affected"
      }
    ]
  }
]