CVE-2022-20871 — MEDIUM (6.3)

Vulnerability Description

A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by authenticating to the system and sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least read-only credentials.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.Attention: Simplifying the Cisco portfolio includes the renaming of security products under one brand: Cisco Secure. For more information, see .

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Cisco	Asyncos	12.5.1-011
Cisco	Secure Web Appliance Virtual S1000V	-
Cisco	Secure Web Appliance Virtual S100V	-
Cisco	Secure Web Appliance Virtual S300V	-
Cisco	Secure Web Appliance Virtual S600V	-
Cisco	Secure Web Appliance S196	-
Cisco	Secure Web Appliance S396	-
Cisco	Secure Web Appliance S696	-

Related Weaknesses (CWE)

CWE-78

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ciNot Applicable
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ciNot Applicable
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ciVendor Advisory

FAQ

What is CVE-2022-20871?

CVE-2022-20871 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an authenticated, remote a...

How severe is CVE-2022-20871?

CVE-2022-20871 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-20871?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Asyncos, Cisco Secure Web Appliance Virtual S1000V, Cisco Secure Web Appliance Virtual S100V, Cisco Secure Web Appliance Virtual S300V, Cisco Secure Web Appliance Virtual S600V.