5.8
Moyenne
CVE-2025-20183 A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS…
Description
A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. The vulnerability is due to improper handling of a crafted range request header. An attacker could exploit this vulnerability by sending an HTTP request with a crafted range request header through the affected device. A successful exploit could allow the attacker to evade the antivirus scanner and download malware onto the endpoint without detection by Cisco Secure Web Appliance.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Web Appliance 15.2 | 15.2.0-116 → 15.2.0-164 | Pas de correctif indiqué |
| Cisco Secure Web Appliance | 15.1.0-287 | Pas de correctif indiqué |
| Cisco Secure Web Appliance 15.0 | 15.0.0-322 → 15.0.0-355 | Pas de correctif indiqué |
| Cisco Secure Web Appliance 14.5 | 14.5.0-498 → 14.5.3-033 | Pas de correctif indiqué |
| Cisco Secure Web Appliance 14.1 | 14.1.0-032 → 14.1.0-047 | Pas de correctif indiqué |
| Cisco Secure Web Appliance 14.0 | 14.0.1-014 → 14.0.5-007 | Pas de correctif indiqué |
| Cisco Secure Web Appliance 12.5 | 12.5.1-011 → 12.5.6-008 | Pas de correctif indiqué |
| Cisco Secure Web Appliance 12.0 | 12.0.1-268 → 12.0.5-011 | Pas de correctif indiqué |
| Cisco Secure Web Appliance 11.8 | 11.8.0-414 → 11.8.4-004 | Pas de correctif indiqué |
Références
- cisco-sa-swa-range-bypass-2BsEHYSu sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Web Appliance
Les 15 CVE de Cisco Secure Web Appliance →
CVE-2026-20152
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could…
5.3
Moyenne
CVE-2026-20056
A vulnerability in the Dynamic Vectoring and Streaming (DVS) Engine implementation of Cisco AsyncOS Software for Cisco…
4.0
Moyenne
CVE-2025-20207
A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco…
4.3
Moyenne
CVE-2025-20185
A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure…
3.4
Faible