CVE-2020-3448
Medium
Description
A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal services that are running on an affected device. The vulnerability is due to insufficient enforcement of access control in the software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow an attacker to impact monitoring of sensors that are managed by the software.
SeverityMedium
CVSS5.8
Exploit probability—
Product
Cisco Cyber Vision Center
PublishedAug 17, 2020
First seenAug 17, 2020
Weakness typeCWE-284Improper access control
How to fix
Update
- cisco cyber_vision_center3.0.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco cyber_vision_center | v < 3.0.4 | 3.0.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.