PT-2025-9693 · Cisco · Cisco Asyncos+1

Published 2023-01-16 · Updated 2025-07-31 · CVE-2020-3122

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Content Security Management Appliance (SMA) (affected versions not specified)

Description A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-05035

CVE-2020-3122

Affected Products

Cisco Asyncos

Cisco Content Security Management Appliance

References · 11

• https://osv.dev/vulnerability/CVE-2020-3122 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05035 · Security Note
• https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr92383 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3122 · Security Note
• https://vulners.com/cve/CVE-2020-3122 · Note
• https://twitter.com/CVEnew/status/1897133271022030873 · Twitter Post
• https://t.me/cvenotify/113431 · Telegram Post
• https://t.me/cvedetector/19546 · Telegram Post
• https://vuldb.com/?id.298582 · Note
• https://t.me/cveNotify/130458 · Telegram Post
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvr92383 · Note