« Volver al listado

CVE-2020-3122

Estado: AnalizadaMedia (5.3)—

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Asyncos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-3122",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2020-3122",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-04T18:26:53.334394Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco IronPort Security Management Appliance",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "vendor": "Cisco",
          "product": "Cisco Secure Email and Web Manager",
          "versions": [
            {
              "status": "affected",
              "version": "11.0.0(Ritz)-128"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-03-04T19:15:36.890",
  "references": [
    {
      "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr92383",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la interfaz de administración basada en web de Cisco AsyncOS para Cisco Content Security Management Appliance (SMA) podría permitir que un atacante remoto no autenticado obtenga información confidencial de la red."
    }
  ],
  "lastModified": "2026-06-17T03:17:23.780",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:asyncos:11.0.0-128:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BADF6D45-FDBE-42A7-A915-0DDD8FBC64F9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m170:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3057023B-AD68-4953-A780-75EA416A7B94"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m190:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B87164B6-4717-4968-86F7-C62EB677FC50"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m195:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "10BD81D0-D81A-4361-B4E8-D674732A2A33"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m380:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D28903F8-3C4D-4337-9721-CEC108A7E2D5"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m390:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "84ACD394-2E45-4E8E-A342-AC57935C7038"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m390x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6112D56B-B68B-40B0-8EB9-3315533110C7"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m395:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8A1198BC-C934-4C26-887D-D599E8128FD3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m680:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "10374BA0-E7DD-4930-8C58-251F98B75A11"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m690:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CD265B49-C691-44B3-A505-DC704E80313C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m690x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E37CFC3A-1752-4C66-BD32-CFFA46C3E6AD"
            },
            {
              "criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m695:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "830693AC-A737-43B9-BBB4-E3A1C950C47F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}