Critical Flaw in Cisco Secure Email and Web Manager Lets Attackers Bypass Authentication

🗓️ 16 Jun 2022 03:28:00Reported by The Hacker NewsType

Critical Flaw in Cisco Secure Email and Web Manager

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2022-20825	15 Jun 202223:00	–	attackerkb
ATTACKERKB	CVE-2022-20798	15 Jun 202223:00	–	attackerkb
BDU FSTEC	The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W lies in insufficient validation of input data. This allows an attacker to execute arbitrary code or trigger a service failure by sending specially crafted HTTP packets.	17 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the external authentication function of the Cisco Secure Email and Web Manager (formerly known as Cisco Security Management Appliance and Cisco Email Security Appliance) relates to access control errors, allowing attackers to gain full access to the device’s web interface.	17 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-20798	16 Jun 202209:37	–	circl
Circl	CVE-2022-20825	20 Jun 202214:30	–	circl
Tenable Nessus	Cisco Email Security Appliance External Authentication Bypass (cisco-sa-sma-esa-auth-bypass-66kEcxQD)	27 Jul 202200:00	–	nessus
Tenable Nessus	Cisco Secure Email and Web Manager External Authentication Bypass (cisco-sa-sma-esa-auth-bypass-66kEcxQD)	27 Jul 202200:00	–	nessus
Cisco	Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability	15 Jun 202216:00	–	cisco
Cisco	Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability	15 Jun 202216:00	–	cisco