Bypass Vulnerability in Cisco AsyncOS Software for Cisco Secure Web Appliance

CVE-2022-20952

What is CVE-2022-20952?

A vulnerability within the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance allows an unauthenticated remote attacker to bypass established security rules. This occurs due to the improper detection of malformed and encoded traffic. Exploiting this vulnerability enables attackers to connect to a malicious server through an affected device, potentially receiving malformed HTTP responses that should have been blocked. Consequently, the attacker can bypass explicit block rules, leading to unmonitored network traffic that jeopardizes network security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References