CVE-2020-3452highbajo ataqueCWE-20

CVE-2020-3452: fallo de gravedad alta en Cisco Adaptive Security Appliance (ASA) Software

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cisco Adaptive Security Appliance+ Monitorear Cisco Firepower Threat Defense

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 7.5epss 100%
de la publicación al arma2 días
Publicada en NVD22 jul
1ª PoC+2d
CISA KEV+469d
Acción exigida por CISAplazo federal: 2022-05-03

Apply updates per vendor instructions.

En resumen

Una falla en los servicios web de Cisco ASA y FTD permite que atacantes lean archivos mediante solicitudes web especialmente diseñadas. Esto es importante porque la información sensible almacenada en el área de servicios web podría estar expuesta sin necesidad de autenticación.

Detalle técnico

Vulnerabilidad de traversal de directorios en el procesamiento de URLs de solicitudes HTTP de los servicios web de Cisco ASA y FTD, explotable remotamente sin autenticación cuando WebVPN o AnyConnect están configurados. La falta de validación adecuada de entrada permite secuencias de traversal de directorios en solicitudes HTTP, permitiendo acceso a archivos arbitrarios del sistema de archivos de servicios web; el impacto se limita al alcance de servicios web, sin afectar archivos del sistema operativo subyacente.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability is due to a lack of proper input validation of URLs in HTTP requests processed by an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device. The web services file system is enabled when the affected device is configured with either WebVPN or AnyConnect features. This vulnerability cannot be used to obtain access to ASA or FTD system files or underlying operating system (OS) files.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Cisco · Cisco Adaptive Security Appliance (ASA) Software
PoCs públicas encontradas — 51
exploitdbwww.exploit-db.com/exploits/48871no verificadoexploitdbwww.exploit-db.com/exploits/48722no verificadoexploitdbwww.exploit-db.com/exploits/49262no verificadogithubgithub.com/darklotuskdb/CISCO-CVE-2020-3452-Scanner-Exploiter★ 98githubgithub.com/cygenta/CVE-2020-3452★ 26githubgithub.com/PR3R00T/CVE-2020-3452-Cisco-Scanner★ 25githubgithub.com/3ndG4me/CVE-2020-3452-Exploit★ 24githubgithub.com/0x5ECF4ULT/CVE-2020-3452★ 23githubgithub.com/murataydemir/CVE-2020-3452★ 8githubgithub.com/fuzzlove/Cisco-ASA-FTD-Web-Services-Traversal★ 6githubgithub.com/grim3/CVE-2020-3452★ 4githubgithub.com/foulenzer/CVE-2020-3452★ 3githubgithub.com/faisalfs10x/Cisco-CVE-2020-3452-shodan-scanner★ 2githubgithub.com/Loneyers/cve-2020-3452★ 2githubgithub.com/XDev05/CVE-2020-3452-PoC★ 2githubgithub.com/Cappricio-Securities/CVE-2020-3452★ 1githubgithub.com/Aviksaikat/CVE-2020-3452★ 1githubgithub.com/ludy-dev/Cisco-ASA-LFI★ 1githubgithub.com/paran0id34/CVE-2020-3452★ 1githubgithub.com/curtishoughton/CVE-2020-3452-Cisco-Python-Scanner★ 0githubgithub.com/mr-r3b00t/CVE-2020-3452★ 0githubgithub.com/abrewer251/CVE-2020-3452_Cisco_ASA_PathTraversal★ 0githubgithub.com/iveresk/cve-2020-3452★ 0githubgithub.com/Gh0st0ne/http-vuln-cve2020-3452.nse★ 0githubgithub.com/sujaygr8/CVE-2020-3452★ 0githubgithub.com/Veids/CVE-2020-3452_auto★ 0vulncheckvulncheck.com/xdb/c571acc5a812no verificadovulncheckvulncheck.com/xdb/2a69a67b6102no verificadovulncheckvulncheck.com/xdb/7d16c3139c04no verificadocve_referencepacketstormsecurity.com/files/158647/Cisco-Adaptive-Security-Appliance-Software-9.11-Local-File-Inclusion.htmlno verificadovulncheckvulncheck.com/xdb/38dc36ab63a7no verificadovulncheckvulncheck.com/xdb/2844089d4205no verificadovulncheckvulncheck.com/xdb/ea4e2fe7fa5bno verificadovulncheckvulncheck.com/xdb/cd0659505a89no verificadocve_referencepacketstormsecurity.com/files/160497/Cisco-ASA-9.14.1.10-FTD-6.6.0.1-Path-Traversal.htmlno verificadovulncheckvulncheck.com/xdb/6f0ce488573dno verificadovulncheckvulncheck.com/xdb/fb8cdd3b2bf7no verificadovulncheckvulncheck.com/xdb/359345081311no verificadovulncheckvulncheck.com/xdb/aa17afb12c79no verificadovulncheckvulncheck.com/xdb/46d55b924a43no verificadovulncheckvulncheck.com/xdb/ce846e08db40no verificadocve_referencepacketstormsecurity.com/files/158646/Cisco-ASA-FTD-Remote-File-Disclosure.htmlno verificadovulncheckvulncheck.com/xdb/9994be2cbc89no verificadovulncheckvulncheck.com/xdb/c9fadd0b730fno verificadocve_referencepacketstormsecurity.com/files/159523/Cisco-ASA-FTD-9.6.4.42-Path-Traversal.htmlno verificadovulncheckvulncheck.com/xdb/6b23e00dd9c9no verificadovulncheckvulncheck.com/xdb/9bf142c2d239no verificadovulncheckvulncheck.com/xdb/765a6e6e3a97no verificadovulncheckvulncheck.com/xdb/14238ed757f7no verificadovulncheckvulncheck.com/xdb/582d43abc71fno verificadovulncheckvulncheck.com/xdb/12e485c619ddno verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Cisco Adaptive Security Appliance (ASA) Software

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-3580MEDIUMCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesEPSS 85.6%KEVCVE-2020-3259HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityEPSS 71.5%KEVCVE-2024-20353HIGHCVE-2024-20353EPSS 69.8%KEVCVE-2023-20269MEDIUMCVE-2023-20269EPSS 26.6%KEVCVE-2024-20359MEDIUMCVE-2024-20359EPSS 18.8%KEVCVE-2024-20481MEDIUMCVE-2024-20481EPSS 15.9%KEV