PT-2020-4227 · Cisco · Cisco Cyber Vision Center

Published 2020-08-05 · Updated 2020-08-20 · CVE-2020-3448

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Cyber Vision Center (affected versions not specified)

Description: The issue is related to insufficient access control in the software, which could allow an unauthenticated, remote attacker to bypass authentication and access internal services. This could potentially impact the monitoring of sensors managed by the software. An attacker could exploit this by directly accessing the internal services of an affected device.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Missing Authentication

Weakness Enumeration

CWE-284

CWE-306

Related Identifiers

BDU:2020-04667

CVE-2020-3448

Affected Products

Cisco Cyber Vision Center

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvc-bypass-K99Cb2ff · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3448 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04667 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3448 · Security Note