Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability (Cisco Cisco Web Security Appliance (WSA))
En bref
- Source
- NVD
- EPSS
- EPSS 0.67 % · centile 52 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- cisco
- Statut NVD
- Modified
Rechercher sur…
Description
A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers. This vulnerability is due to improper certificate validation when an affected device establishes TLS connections. A man-in-the-middle attacker could exploit this vulnerability by sending a crafted TLS packet to an affected device. A successful exploit could allow the attacker to spoof a trusted host and then extract sensitive information or alter certain API requests.
Faiblesses (CWE)
- CWE-296 — Suivi incorrect de la chaîne de confiance d'un certificat
- CWE-295 — Validation incorrecte de certificat
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | cisco |
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | NVD · psirt@cisco.com (Secondary) |
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.8 | AV:N/AC:M/Au:N/C:P/I:P/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2021-7033
- GCVE · GCVE-0-2021-1566
Avis du CERT-FR
- CERTFR-2021-AVI-470 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*< 12.5.3-035cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 13.0 < 13.0.0-030cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 13.5 < 13.5.3-010cpe:2.3:a:cisco:web_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*< 11.8.3-021cpe:2.3:a:cisco:web_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 12.0.0 < 12.0.3-005cpe:2.3:a:cisco:web_security_appliance:-:*:*:*:*:*:*:*cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 12.5.0 < 12.5.1-043
Produits affectés
| Produit | Versions |
|---|---|
| Cisco · Cisco Web Security Appliance (WSA) | affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |