by Kastro
Paper/Archive/CVE-2022-20738

CVE-2022-20738

Cisco Cisco Umbrella Insights Virtual Appliance — Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 65.8.658 × 2013.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloading a crafted payload through specific methods. A successful exploit could allow the attacker to bypass file inspection protections and download a malicious payload.

Affected

ProductAffectedFixed inSource
Cisco Umbrella Insights Virtual Appliancen/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cisco (CNA)5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisorytools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swg-fbyps-3z4qT7p