CVE-2022-20738CWE-693

Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability

Medium · published February 10, 2022

CVSS v3.1
5.8
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloading a crafted payload through specific methods. A successful exploit could allow the attacker to bypass file inspection protections and download a malicious payload.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01105 · 65.5th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2022-02-10T17:06Z
EPSS history
Timeline
  • 10 FEB 17:06Z
    Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability
    cvelistv5