CVE-2023-20215 : A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthen

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule, allowing traffic onto a network that should have been blocked. This vulnerability is due to improper detection of malicious traffic when the traffic is encoded with a specific content format. An attacker could exploit this vulnerability by using an affected device to connect to a malicious server and receiving crafted HTTP responses. A successful exploit could allow the attacker to bypass an explicit block rule and receive traffic that should have been rejected by the device.

Published 2023-08-03 22:15:12

Updated 2024-01-25 17:15:37

Source Cisco Systems, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-20215

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20215

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.8	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N	N/A	N/A	Cisco:cisco-sa-wsa-bypass-vXvqwzsj	2024-08-14
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: Low Availability: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None
5.8	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N	3.9	1.4	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: Low Availability: None

Products affected by CVE-2023-20215

Cisco » Asyncos » Version: 11.7.2-011
cpe:2.3:o:cisco:asyncos:11.7.2-011:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 12.5.1-011
cpe:2.3:o:cisco:asyncos:12.5.1-011:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 12.5.2-007
cpe:2.3:o:cisco:asyncos:12.5.2-007:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 12.5.4-005
cpe:2.3:o:cisco:asyncos:12.5.4-005:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 14.0.2-012
cpe:2.3:o:cisco:asyncos:14.0.2-012:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.7.0-406
cpe:2.3:o:cisco:asyncos:11.7.0-406:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.7.0-418
cpe:2.3:o:cisco:asyncos:11.7.0-418:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.7.1-006
cpe:2.3:o:cisco:asyncos:11.7.1-006:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.7.1-020
cpe:2.3:o:cisco:asyncos:11.7.1-020:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.7.1-049
cpe:2.3:o:cisco:asyncos:11.7.1-049:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.8.0-414
cpe:2.3:o:cisco:asyncos:11.8.0-414:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.8.1-023
cpe:2.3:o:cisco:asyncos:11.8.1-023:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.8.3-018
cpe:2.3:o:cisco:asyncos:11.8.3-018:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 11.8.3-021
cpe:2.3:o:cisco:asyncos:11.8.3-021:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 12.0.1-268
cpe:2.3:o:cisco:asyncos:12.0.1-268:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 12.0.3-007
cpe:2.3:o:cisco:asyncos:12.0.3-007:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 12.5.5-004
cpe:2.3:o:cisco:asyncos:12.5.5-004:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 14.0.3-014
cpe:2.3:o:cisco:asyncos:14.0.3-014:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 14.0.4-005
cpe:2.3:o:cisco:asyncos:14.0.4-005:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 14.5.0-498
cpe:2.3:o:cisco:asyncos:14.5.0-498:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 14.5.1-008
cpe:2.3:o:cisco:asyncos:14.5.1-008:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A
Cisco » Asyncos » Version: 14.5.1-016
cpe:2.3:o:cisco:asyncos:14.5.1-016:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » S195 » Version: N/A
When used together with: Cisco » S395 » Version: N/A
When used together with: Cisco » S695 » Version: N/A
When used together with: Cisco » Web Security Appliance S170 » Version: N/A
When used together with: Cisco » Web Security Appliance S190 » Version: N/A
When used together with: Cisco » Web Security Appliance S380 » Version: N/A
When used together with: Cisco » Web Security Appliance S390 » Version: N/A
When used together with: Cisco » Web Security Appliance S680 » Version: N/A
When used together with: Cisco » Web Security Appliance S690 » Version: N/A
When used together with: Cisco » Web Security Appliance S690x » Version: N/A

Vulnerability Details : CVE-2023-20215

Exploit prediction scoring system (EPSS) score for CVE-2023-20215

CVSS scores for CVE-2023-20215

CWE ids for CVE-2023-20215

References for CVE-2023-20215

Products affected by CVE-2023-20215