Vulnerabilities fixed in Cisco AsyncOS Software

🗓️ 07 Feb 2025 07:41:10Reported by NCSCType

Cisco AsyncOS fixes address unauthenticated access via range header processing, command injection from configuration files, and root privilege escalation.

Reporter	Title	Published	Views	Family All 41
BDU FSTEC	The vulnerability of the Range Request Forward function in the Cisco AsyncOS operating system of Cisco Secure Web Appliances allows attackers to circumvent security restrictions and write arbitrary files.	17 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco AsyncOS operating system allows a hacker to escalate their privileges and execute arbitrary commands.	20 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco AsyncOS operating system allows a hacker to escalate their privileges and execute arbitrary commands.	3 Mar 202500:00	–	bdu_fstec
Circl	CVE-2025-20183	5 Feb 202516:36	–	circl
Circl	CVE-2025-20184	5 Feb 202516:36	–	circl
Circl	CVE-2025-20185	5 Feb 202516:36	–	circl
Cisco	Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Vulnerabilities	5 Feb 202516:00	–	cisco
Cisco	Cisco Secure Web Appliance Range Request Bypass Vulnerability	5 Feb 202516:00	–	cisco
Tenable Nessus	Cisco Secure Email Gateway Command Injection (cisco-sa-esa-sma-wsa-multi-yKUJhS34)	7 Feb 202500:00	–	nessus
Tenable Nessus	Cisco Secure Email Gateway Privelege Escalation (cisco-sa-esa-sma-wsa-multi-yKUJhS34)	7 Feb 202500:00	–	nessus

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-multi-yKUJhS34
sec	www.sec.cloudapps.cisco.com/security/center/publicationService.x
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-range-bypass-2BsEHYSu
sec	www.sec.cloudapps.cisco.com/security/center/publicationService.x

07 Feb 2025 07:41Current

8.2High risk

Vulners AI Score8.2

CVSS 3.16.5 - 7.2

EPSS0.00289

SSVC