Bypass Vulnerability in Cisco Secure Web Appliance Scanning Engine

CVE-2023-20215

Summary

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance permits an unauthenticated attacker to bypass network security rules. This vulnerability arises from the improper detection of malicious traffic encoded in a specific content format. Exploiting this flaw, an attacker connects to a malicious server, receiving specially crafted HTTP responses that evade explicit block rules set on the appliance. The exploit allows unauthorized traffic, which should have been rejected, to penetrate the network.

References