CVE-2023-20215
CVSS 3.1 Score 5.8 of 10 (medium)
Details
Summary
CVE-2023-20215 is a vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance. It allows an unauthenticated, remote attacker to bypass a configured rule and allow traffic onto a network that should have been blocked. The vulnerability occurs due to improper detection of malicious traffic when it is encoded with a specific content format. An attacker can exploit this vulnerability by connecting to a malicious server using an affected device and receiving crafted HTTP responses. This would enable the attacker to bypass block rules and receive traffic that should have been rejected by the device. The vulnerability has a risk score of 25 and a base severity rating of MEDIUM. It affects various products and can pose a potential danger to organizations by compromising network security if not remediated promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions