CVE-2020-3448: cisco cyber vision center

csirt@kutim:~/threat-intel/cve/CVE-2020-3448

CVSS 5.8 · Medium EPSS 1,1%

Kerentanan Improper Access Control pada cisco cyber vision center. Skor CVSS 3.1 5.8 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal services that are running on an affected device. The vulnerability is due to insufficient enforcement of access control in the software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow an attacker to impact monitoring of sensors that are managed by the software.

Rincian

Terbit di NVD: 17 Agustus 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-284: Improper Access Control
CWE-306: Missing Authentication for Critical Function
EPSS (30 hari): 1,1% peluang dieksploitasi; lebih tinggi dari 65,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
cisco	cyber vision center	Semua versi sebelum 3.0.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvc-bypass-K99Cb2ff advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.