← العودة للجدول
CVE-2020-3187
CVE-2020-3187 — A vulnerability in the web services interface of Cisco Adaptive Security Applian
📅 2020-05-06
🔴 Critical 🔥 Yes NVD APT Cisco CVSS 9.1 🎯 EPSS 94.3%

📋 الوصف الكامل

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted system. The vulnerability is due to a lack of proper input validation of the HTTP URL. An attacker

💻 الأنظمة المتأثرة

Cisco Firepower | Cisco

⚠️ نوع التهديد

APT

🔗 CVE ID

CVE-2020-3187

📡 المصدر

NVD

✅ الحلول والتخفيف

Cisco Security Advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←