Lucene search
Lalit2020H1:944665HistoryJul 28, 2020 - 7:06 a.m.
QIWI: CVE-2020-3187 - unauthenticated arbitrary file deletion in Cisco
2020-07-2807:06:17
lalit2020
hackerone.com
57
0.975 High
EPSS
Percentile
100.0%
Steps to reproduce:
I could delete arbitrary files from https://79.142.21.220/ using CVE-2020-3187.
POC video is attached.
Browser/OS: Chrome/Windows
ALSO Cisco ASA - Arbitary File Read - CVE-2020-3452
the file downloaded also attached here for poc
Impact
Impact: RCE is P1 critical vulnerability, which can be used to make any server non functional causing millions of dollars loss.
Related
packetstorm
packetstorm
Cisco Adaptive Security Appliance Software 9.7 Arbitrary File Deletion
2020-07-29 00:00:00
Cisco Adaptive Security Appliance Software 9.11 Local File Inclusion
2020-07-29 00:00:00
Cisco ASA / FTD 9.6.4.42 Path Traversal
2020-10-11 00:00:00
attackerkb
attackerkb
CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability
2020-07-22 00:00:00
CVE-2020-3187
2020-05-06 00:00:00
CVE-2020-3580
2020-10-21 00:00:00
hackerone
hackerone
Mail.ru: CVE-2020-3187 ะฝะฐ ip ะฐะดัะตัะต 91.231.115.30
2020-11-01 10:57:59
MTN Group: Unauthenticated Arbitrary File Deletion (CVE-2020-3187)
2020-12-11 14:53:44
exploitdb
exploitdb
Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion
2020-07-29 00:00:00
Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion
2020-07-28 00:00:00
Cisco ASA and FTD 9.6.4.42 - Path Traversal
2020-10-12 00:00:00
cve
cve
CVE-2020-3187
2020-05-06 17:15:12
CVE-2020-3452
2020-07-22 20:15:11
cisco
cisco
nvd
nvd
CVE-2020-3187
2020-05-06 17:15:12
CVE-2020-3452
2020-07-22 20:15:11
cvelist
cvelist
zdt
zdt
nessus
nessus
ptsecurity
ptsecurity
PT-2020-02: Reading or deleting arbitrary files in Cisco ASA and Cisco FTD
2019-04-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Cisco Firepower Threat Defense Directory Traversal (CVE-2020-3187)
2020-08-17 00:00:00
Cisco Adaptive Security Appliance Directory Traversal (CVE-2020-3452)
2020-07-28 00:00:00
githubexploit
githubexploit
Exploit for Path Traversal in Cisco Firepower Threat Defense
2021-06-14 06:27:11
Exploit for Improper Input Validation in Cisco Adaptive Security Appliance
2020-08-01 08:27:11
Exploit for Improper Input Validation in Cisco Adaptive Security Appliance
2020-07-25 16:11:55
nuclei
nuclei
prion
prion
Directory traversal
2020-05-06 17:15:00
Directory traversal
2020-07-22 20:15:00
cisa_kev
cisa_kev
Cisco ASA and FTD Read-Only Path Traversal Vulnerability
2021-11-03 00:00:00
thn
thn
Cisco ASA Flaw Under Active Attack After PoC Exploit Posted Online
2021-06-28 06:39:00
impervablog
impervablog
threatpost
threatpost
Cisco ASA Bug Now Actively Exploited as PoC Drops
2021-06-25 16:08:38
Attackers Exploiting High-Severity Network Security Flaw, Cisco Warns
2020-07-27 16:23:16
Cisco Network Security Flaw Leaks Sensitive Data
2020-07-23 19:49:49
