CVE-2020-27130
Cisco Security Manager Path Traversal Vulnerability
- State
- Published
- Severity
- 9.1 Critical
- Published
- Nov 17, 2020
- Updated
- Nov 13, 2024
- Reserved
- Oct 13, 2020
Description
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to download arbitrary files from the affected device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Security ManagerCisco |
|
References
- 20201116 Cisco Security Manager Path Traversal Vulnerabilityvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.