CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20215

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule, allowing traffic onto a network that should have been blocked. This vulnerability is due to improper detection of malicious traffic when the traffic is encoded with a specific content format. An attacker could exploit this vulnerability by using an affected device to connect to a malicious server and receiving crafted HTTP responses. A successful exploit could allow the attacker to bypass an explicit block rule and receive traffic that should have been rejected by the device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.7%

CVSS Severity

CVSS v3 Score 5.8

References

Products affected by CVE-2023-20215

Cisco » S195 » Version: N/A

cpe:2.3:h:cisco:s195:-
Cisco » S395 » Version: N/A

cpe:2.3:h:cisco:s395:-
Cisco » S695 » Version: N/A

cpe:2.3:h:cisco:s695:-
Cisco » Web Security Appliance S170 » Version: N/A

cpe:2.3:h:cisco:web_security_appliance_s170:-
Cisco » Web Security Appliance S190 » Version: N/A

cpe:2.3:h:cisco:web_security_appliance_s190:-
Cisco » Web Security Appliance S380 » Version: N/A

cpe:2.3:h:cisco:web_security_appliance_s380:-
Cisco » Web Security Appliance S390 » Version: N/A

cpe:2.3:h:cisco:web_security_appliance_s390:-
Cisco » Web Security Appliance S680 » Version: N/A

cpe:2.3:h:cisco:web_security_appliance_s680:-
Cisco » Web Security Appliance S690 » Version: N/A

cpe:2.3:h:cisco:web_security_appliance_s690:-
Cisco » Web Security Appliance S690x » Version: N/A

cpe:2.3:h:cisco:web_security_appliance_s690x:-
Cisco » Asyncos » Version: 11.7.0-406

cpe:2.3:o:cisco:asyncos:11.7.0-406
Cisco » Asyncos » Version: 11.7.0-418

cpe:2.3:o:cisco:asyncos:11.7.0-418
Cisco » Asyncos » Version: 11.7.1-006

cpe:2.3:o:cisco:asyncos:11.7.1-006
Cisco » Asyncos » Version: 11.7.1-020

cpe:2.3:o:cisco:asyncos:11.7.1-020
Cisco » Asyncos » Version: 11.7.1-049

cpe:2.3:o:cisco:asyncos:11.7.1-049
Cisco » Asyncos » Version: 11.7.2-011

cpe:2.3:o:cisco:asyncos:11.7.2-011
Cisco » Asyncos » Version: 11.8.0-414

cpe:2.3:o:cisco:asyncos:11.8.0-414
Cisco » Asyncos » Version: 11.8.1-023

cpe:2.3:o:cisco:asyncos:11.8.1-023
Cisco » Asyncos » Version: 11.8.3-018

cpe:2.3:o:cisco:asyncos:11.8.3-018
Cisco » Asyncos » Version: 11.8.3-021

cpe:2.3:o:cisco:asyncos:11.8.3-021
Cisco » Asyncos » Version: 12.0.1-268

cpe:2.3:o:cisco:asyncos:12.0.1-268
Cisco » Asyncos » Version: 12.0.3-007

cpe:2.3:o:cisco:asyncos:12.0.3-007
Cisco » Asyncos » Version: 12.5.1-011

cpe:2.3:o:cisco:asyncos:12.5.1-011
Cisco » Asyncos » Version: 12.5.2-007

cpe:2.3:o:cisco:asyncos:12.5.2-007
Cisco » Asyncos » Version: 12.5.4-005

cpe:2.3:o:cisco:asyncos:12.5.4-005
Cisco » Asyncos » Version: 12.5.5-004

cpe:2.3:o:cisco:asyncos:12.5.5-004
Cisco » Asyncos » Version: 14.0.2-012

cpe:2.3:o:cisco:asyncos:14.0.2-012
Cisco » Asyncos » Version: 14.0.3-014

cpe:2.3:o:cisco:asyncos:14.0.3-014
Cisco » Asyncos » Version: 14.0.4-005

cpe:2.3:o:cisco:asyncos:14.0.4-005
Cisco » Asyncos » Version: 14.5.0-498

cpe:2.3:o:cisco:asyncos:14.5.0-498
Cisco » Asyncos » Version: 14.5.1-008

cpe:2.3:o:cisco:asyncos:14.5.1-008
Cisco » Asyncos » Version: 14.5.1-016

cpe:2.3:o:cisco:asyncos:14.5.1-016

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20215

Products

Pricing

Contact Us