#VU71330 Security features bypass in Cisco Email Security Appliance - CVE-2023-20057

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU71330

#VU71330 Security features bypass in Cisco Email Security Appliance - CVE-2023-20057

Published: January 18, 2023


Vulnerability identifier: #VU71330
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2023-20057
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Cisco Email Security Appliance
Software vendor:
Cisco Systems, Inc

Description

The vulnerability allows a remote attacker to bypass URL filtering.

The vulnerability exists due to improper processing of URLs. A remote attacker can bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device.


Remediation

Install updates from vendor's website.

External links