PT-2021-6796 · Cisco · Cisco Asyncos+1

Seyed Amirhossein Nouraie · Published 2021-11-02 · Updated 2022-04-14 · CVE-2022-20784

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance versions (affected versions not specified)

Description The issue is related to the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software, which is affected by insufficient input validation. This could allow a remote attacker to bypass established web request policies and access blocked content on an affected device. The vulnerability is due to incorrect handling of certain character combinations inserted into a URL. An attacker could exploit this by sending crafted URLs to be processed by an affected device, potentially allowing them to bypass the web proxy and access blocked web content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-254

CWE-20

Related Identifiers

BDU:2022-02217

CVE-2022-20784

Affected Products

Cisco Asyncos

Cisco Web Security Appliance

References · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-filter-bypass-XXXTU3X · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02217 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20784 · Security Note
• https://vuldb.com/ru/?id.196613 · Note
• https://cybersecurity-help.cz/vdb/SB2022040625 · Note
• https://t.me/cibsecurity/40261 · Telegram Post