A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers. This vulnerability is due to improper certificate validation when an affected device establishes TLS connections. A man-in-the-middle attacker could exploit this vulnerability by sending a crafted TLS packet to an affected device. A successful exploit could allow the attacker to spoof a trusted host and then extract sensitive information or alter certain API requests.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NCisco Asyncos
OSCisco12.0.0 – 12.0.3-005 (excl.)< 12.5.3-03513.0 – 13.0.0-030 (excl.)13.5 – 13.5.3-010 (excl.)12.5.0 – 12.5.1-043 (excl.)< 11.8.3-021Cisco Email Security Appliance
APPCiscoall versionsCisco Web Security Appliance
APPCiscoall versions
Related vulnerabilities
RCE z uprawnieniami root w Cisco Secure Email Gateway i Secure Email and Web Manager
ClamAV: RCE przez buffer overflow w parserze partycji HFS+
Cisco ESA/SMA: pominięcie uwierzytelnienia LDAP w interfejsie webowym
A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attac...
A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthentica...