Skip to content
fr Sign in
5.3 Medium

CVE-2020-3546 A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA)…

Description

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are sent to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the interface of an affected device. A successful exploit could allow the attacker to obtain the IP addresses that are configured on the internal interfaces of the affected device. There is a workaround that addresses this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Cisco Email Security Appliance (ESA) Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Email Security Appliance (ESA)

The 30 CVEs of Cisco Email Security Appliance (ESA) →
CVE-2023-20057 A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA)… 0.0 Not rated CVE-2022-20798 A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as… 9.8 Critical CVE-2022-20664 A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security… 7.7 High CVE-2022-20653 A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS… 7.5 High
Track this CVE