Bypass Vulnerability in Cisco AsyncOS Software for Cisco Secure Web Appliance

CVE-2022-20952

Summary

A vulnerability within the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance allows an unauthenticated remote attacker to bypass established security rules. This occurs due to the improper detection of malformed and encoded traffic. Exploiting this vulnerability enables attackers to connect to a malicious server through an affected device, potentially receiving malformed HTTP responses that should have been blocked. Consequently, the attacker can bypass explicit block rules, leading to unmonitored network traffic that jeopardizes network security.

References