Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability (Cisco Cisco Web Security Appliance (WSA))
At a glance
- Source
- NVD
- EPSS
- EPSS 0.67 % · percentile 52 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Modified
Description
A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers. This vulnerability is due to improper certificate validation when an affected device establishes TLS connections. A man-in-the-middle attacker could exploit this vulnerability by sending a crafted TLS packet to an affected device. A successful exploit could allow the attacker to spoof a trusted host and then extract sensitive information or alter certain API requests.
Weaknesses (CWE)
- CWE-296 — Improper Following of a Certificate's Chain of Trust
- CWE-295 — Improper Certificate Validation
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | cisco |
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | NVD · psirt@cisco.com (Secondary) |
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.8 | AV:N/AC:M/Au:N/C:P/I:P/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-7033
- GCVE · GCVE-0-2021-1566
CERT-FR advisories
- CERTFR-2021-AVI-470 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*< 12.5.3-035cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 13.0 < 13.0.0-030cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 13.5 < 13.5.3-010cpe:2.3:a:cisco:web_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*< 11.8.3-021cpe:2.3:a:cisco:web_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 12.0.0 < 12.0.3-005cpe:2.3:a:cisco:web_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 12.5.0 < 12.5.1-043
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Web Security Appliance (WSA) | affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |