CVE-2020-3448— Cisco Cyber Vision Center Software Access Control Bypass Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-3448
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Cyber Vision Center Software Access Control Bypass Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal services that are running on an affected device. The vulnerability is due to insufficient enforcement of access control in the software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow an attacker to impact monitoring of sensors that are managed by the software.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
访问控制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Cyber Vision Center Software 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Cyber Vision Center Software是美国思科（Cisco）公司的一套工业控制系统（ICS）监控解决方案。该产品支持动态资产清单、网络实时监控等功能。 Cisco Cyber Vision Center Software 3.0.4之前版本和3.1.0之前版本中的访问控制机制存在访问控制错误漏洞。远程攻击者可通过直接访问内部服务利用该漏洞影响传感器的监测。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Cyber Vision | n/a | - |
II. Public POCs for CVE-2020-3448
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3448
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvc-bypass-K99Cb2ffvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2020-3448
Same Patch Batch · Cisco · 2020-08-17 · 17 CVEs total
| CVE-2020-3433 | 7.8 HIGH | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability |
| CVE-2020-3500 | 6.8 MEDIUM | Cisco StarOS IPv6 Denial of Service Vulnerability |
| CVE-2020-3463 | 6.1 MEDIUM | Cisco Webex Meetings Reflected Cross-Site Scripting Vulnerability |
| CVE-2020-3346 | 6.1 MEDIUM | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability |
| CVE-2020-3447 | 5.5 MEDIUM | Cisco Email Security Appliance and Cisco Content Security Management Appliance Information |
| CVE-2020-3435 | 5.5 MEDIUM | Cisco AnyConnect Secure Mobility Client for Windows Profile Modification Vulnerability |
| CVE-2020-3434 | 5.5 MEDIUM | Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability |
| CVE-2020-3472 | 5.0 MEDIUM | Cisco Webex Meetings User Email Address Information Disclosure Vulnerability |
| CVE-2020-3464 | 4.8 MEDIUM | Cisco UCS Director Stored Cross-Site Scripting Vulnerability |
| CVE-2020-3449 | 4.3 MEDIUM | Cisco IOS XR Software Additional Paths Denial of Service Vulnerability |
| CVE-2020-3413 | 4.3 MEDIUM | Cisco Webex Meetings Scheduled Meeting Template Deletion Vulnerability |
| CVE-2020-3412 | 4.3 MEDIUM | Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability |
| CVE-2020-3502 | 4.1 MEDIUM | Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities |
| CVE-2020-3501 | 4.1 MEDIUM | Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities |
| CVE-2020-3411 | Cisco DNA Center Information Disclosure Vulnerability | |
| CVE-2020-3363 | Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Cyber Vision
- CVE-2026-20068
Multiple Cisco Products Snort 3 TBD Denial of Service Vulner - CVE-2026-20067
Multiple Cisco Products Snort 3 TBD Denial of Service Vulner - CVE-2026-20057
Cisco Secure Firewall Threat Defense Software Snort 3 Visual - CVE-2026-20054
Cisco Secure Firewall Threat Defense Software Snort 3 Visual - CVE-2026-20053
Cisco Secure Firewall Threat Defense Software Snort 3 Visual
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-284
- CVE-2026-8233
Dotouch XproUPF access control - CVE-2026-42569
phpvms: /importer authorization bypass causing full database - CVE-2026-42205
Avo: Broken Access Control: Unauthorized Execution of Arbitr - CVE-2026-41487
Langfuse: Improper role-based-access control in Langfuse LLM - CVE-2026-42278
UltraDAG: Smart Account Spending Policy Bypass via Pockets
V. Comments for CVE-2020-3448
No comments yet