- Vulnerability/
- cisco-sa-swa-range-bypass-2BsEHYSu
cisco-sa-swa-range-bypass-2BsEHYSu: Cisco Secure Web Appliance Range Request Bypass Vulnerability
First published: Wed Feb 05 2025(Updated: )
A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. The vulnerability is due to improper handling of a crafted range request header. An attacker could exploit this vulnerability by sending an HTTP request with a crafted range request header through the affected device. A successful exploit could allow the attacker to evade the antivirus scanner and download malware onto the endpoint without detection by Cisco Secure Web Appliance.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-range-bypass-2BsEHYSu
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Web Appliance |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-swa-range-bypass-2BsEHYSu?
The severity of the cisco-sa-swa-range-bypass-2BsEHYSu vulnerability is classified as high, indicating a significant risk to affected systems.
How do I fix cisco-sa-swa-range-bypass-2BsEHYSu?
To fix the cisco-sa-swa-range-bypass-2BsEHYSu vulnerability, you should update the Cisco Secure Web Appliance to the latest version provided by Cisco.
What systems are affected by cisco-sa-swa-range-bypass-2BsEHYSu?
The cisco-sa-swa-range-bypass-2BsEHYSu vulnerability affects Cisco Secure Web Appliance running the affected version of Cisco AsyncOS Software.
What type of attacks can exploit cisco-sa-swa-range-bypass-2BsEHYSu?
An attacker can exploit the cisco-sa-swa-range-bypass-2BsEHYSu vulnerability to bypass antivirus scanning and download malicious files remotely.
Is authentication required to exploit cisco-sa-swa-range-bypass-2BsEHYSu?
No, the cisco-sa-swa-range-bypass-2BsEHYSu vulnerability can be exploited by an unauthenticated remote attacker.
- collector/cisco-recent
- source/Cisco
- agent/title
- agent/severity
- agent/last-modified-date
- agent/references
- agent/source
- agent/description
- agent/type
- agent/first-publish-date
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco secure web appliance