PT-2020-1880 · Cisco · Cisco Email Security Appliance+3

Published 2020-03-04 · Updated 2020-03-05 · CVE-2020-3164

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) (affected versions not specified)

Description A vulnerability in the web-based management interface could allow an unauthenticated remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. The issue is due to improper validation of specific HTTP request headers. An attacker could exploit this by sending a malformed HTTP request to an affected device, triggering a prolonged status of high CPU utilization relative to the GUI process(es). Upon successful exploitation, an affected device will still be operative, but its response time and overall performance may be degraded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-01156

CVE-2020-3164

Affected Products

Asyncos

Cisco Content Security Management Appliance

Cisco Email Security Appliance

Cisco Web Security Appliance

References · 5

• https://bdu.fstec.ru/vul/2020-01156 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cont-sec-gui-dos-nJ625dXb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3164 · Security Note
• https://t.me/cvenotify/1329 · Telegram Post