570
VMScore

CVE-2020-27130

Published: 17/11/2020 Updated: 07/11/2023
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote malicious user to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the malicious user to download arbitrary files from the affected device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco security manager

Vendor Advisories

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to and modify sensitive information on the affected device The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device An attacker could exploit this vulnerability by sending ...