Improper access control in Cisco Cyber Vision Center - CVE-2020-3448
Published: August 6, 2020
Vulnerability identifier: #VU34078
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3448
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A remote attacker can directly access the internal services of an affected device and have impact on monitoring of sensors that are managed by the software.
Affected software
Cisco Cyber Vision Center
How to mitigate CVE-2020-3448
Install updates from vendor's website.
Cisco Cyber Vision Center - addressed in versions 3.0.4, 3.1.0