CVE-2023-20057: Medium severity cisco asyncos software vulnerability
A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker could exploit this vulnerability by crafting a URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2023-20057?
The vulnerability CVE-2023-20057 is a URL filtering bypass vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA).
How severe is the vulnerability CVE-2023-20057?
The severity of the vulnerability CVE-2023-20057 is medium, with a severity value of 5.3.
Which software is affected by the vulnerability CVE-2023-20057?
The Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) is affected by the vulnerability CVE-2023-20057.
How can an attacker exploit the vulnerability CVE-2023-20057?
An attacker can exploit the vulnerability CVE-2023-20057 by bypassing the URL reputation filters on an affected device.
Is there a fix available for the vulnerability CVE-2023-20057?
Yes, Cisco has released a security advisory with fixes for the vulnerability CVE-2023-20057. Please refer to the Cisco Security Advisory for more information.