Recurrence of vulnerability analysis for Cisco ASA, FTD and hyperflex HX

One 、Cisco ASA Device arbitrary file deletion vulnerability CVE-2020-3187

Vulnerability description

Cisco ASA Software and FTD Software Medium Web There is a path traversal vulnerability in the service interface , The vulnerability is caused by the program does not HTTP URL Perform correct input verification . A remote attacker can send a crafted message with a directory traversal sequence HTTP Request to use this vulnerability to read and delete sensitive information on the system .

Holes affect

Cisco ASA equipment

 Cisco FTD equipment

  Loophole recurrence

visit http://xxx.xxx.xxx.xxx/+CSCOE+/sessi