Vulnerabilities > CVE-2020-27130 - Unspecified vulnerability in Cisco Security Manager

CVSS 9.1 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

cisco

critical

NVD

Published: 2020-11-17

Updated: 2023-11-07

Summary

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to download arbitrary files from the affected device.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Security Manager - Cisco Security Manager 3.0.2 Cisco Security Manager 3.1 Cisco Security Manager 3.1.1 Cisco Security Manager 3.2 Cisco Security Manager 3.2.1 Cisco Security Manager 3.2.2 Cisco Security Manager 3.3 Cisco Security Manager 3.3.1 Cisco Security Manager 4.0 Cisco Security Manager 4.0.1 Cisco Security Manager 4.1 Cisco Security Manager 4.2 Cisco Security Manager 4.3 Cisco Security Manager 4.4 Cisco Security Manager 4.5 Cisco Security Manager 4.6 Cisco Security Manager 4.7\(0\) Cisco Security Manager 4.8 Cisco Security Manager 4.9 Cisco Security Manager 4.9\(0\)Qa99 Cisco Security Manager 4.10 Cisco Security Manager 4.11 Cisco Security Manager 4.12 Cisco Security Manager 4.13 Cisco Security Manager 4.14 Cisco Security Manager 4.15 Cisco Security Manager 4.16 Cisco Security Manager 4.17 Cisco Security Manager 4.18 Cisco Security Manager 4.19 Cisco Security Manager 4.20 Cisco Security Manager 4.21	70

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-path-trav-NgeRnqgR

Summary

Vulnerable Configurations

Related news

References