CVE-2023-20215

MEDIUM

5.3

CVSS Score

Published: August 3, 2023 at 09:16 PM UTC

Updated: June 17, 2026 at 05:29 AM UTC

12 products affected across 1 vendorAsyncosS395S195

Using Cisco Secure Web Appliance by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Secure Web Appliance - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 0.6%

Description

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule, allowing traffic onto a network that should have been blocked. This vulnerability is due to improper detection of malicious traffic when the traffic is encoded with a specific content format. An attacker could exploit this vulnerability by using an affected device to connect to a malicious server and receiving crafted HTTP responses. A successful exploit could allow the attacker to bypass an explicit block rule and receive traffic that should have been rejected by the device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Asyncos · Cisco

95%

11.7.0-406 11.7.0-418 11.7.1-20 11.7.1-49 11.7.1-6 11.7.2-11 11.8.0-414 11.8.1-23 11.8.3-18 11.8.3-21 12.0.1-268 12.0.3-7 12.5.1-11 12.5.2-7 12.5.4-5 12.5.5-4 14.0.2-12 14.0.3-14 14.0.4-5 14.5.0-498 14.5.1-16 14.5.1-8

cisco-s195 (environment) · cisco-s395 (environment) · cisco-s695 (environment) · cisco-web-security-appliance-s170 (environment) · cisco-web-security-appliance-s190 (environment) · cisco-web-security-appliance-s380 (environment) · cisco-web-security-appliance-s390 (environment) · cisco-web-security-appliance-s680 (environment) · cisco-web-security-appliance-s690 (environment) · cisco-web-security-appliance-s690x (environment)