Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2020-3452

CVE-2020-3452

Medium
Open
KEV
TLP:CLEAR

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

AI Analysis

No AI analysis yet.

Description

Cisco — Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) — Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.

Details

EPSS Score
99.99%

100th percentile

Confidence
100%
CISA KEV
Date Added
Nov 3, 2021
Patch Due
May 3, 2022
Required Action
Apply updates per vendor instructions.
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.