PT-2020-5128 · Cisco · Cisco Email Security Appliance

Published 2020-10-07 · Updated 2021-10-19 · CVE-2020-3568

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (ESA) versions (affected versions not specified)

Description The issue is related to errors in checking incoming URLs, which could allow a remote attacker to bypass URL filters. This is due to insufficient input validation of URLs. An attacker could exploit this by crafting a URL in a specific way, potentially allowing malicious URLs to pass through the device.

Recommendations For all affected versions, consider restricting the input validation for URLs to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider enhancing the URL reputation filters to improve the security posture of the device.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-05724

CVE-2020-3568

Affected Products

Cisco Email Security Appliance

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-zZtugtg3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3568 · Security Note
• https://bdu.fstec.ru/vul/2020-05724 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3568 · Vendor Advisory