CVE-2020-3122

Published: Mar 4, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: psirt@cisco.com (Secondary)

Description

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information.

Affected (1)

Products: Cisco: Asyncos

Cisco

1 product

Asyncos

Configuration A

1 vulnerable · 11 platform

Vulnerable Software	Affected Versions
Cisco Asyncos	Version 11.0.0-128

Running on/with	Platform Versions
Cisco Secure Email And Web Manager M170	All versions
Cisco Secure Email And Web Manager M190	All versions
Cisco Secure Email And Web Manager M195	All versions
Cisco Secure Email And Web Manager M380	All versions
Cisco Secure Email And Web Manager M390	All versions
Cisco Secure Email And Web Manager M390x	All versions
Cisco Secure Email And Web Manager M395	All versions
Cisco Secure Email And Web Manager M680	All versions
Cisco Secure Email And Web Manager M690	All versions
Cisco Secure Email And Web Manager M690x	All versions
Cisco Secure Email And Web Manager M695	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr92383

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.