Medium severity · published Aug 17, 2020
CVE-2020-3448
A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal…
5.8
CVSS
1.1%
EPSS
No
On KEV
Description
A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal services that are running on an affected device. The vulnerability is due to insufficient enforcement of access control in the software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow an attacker to impact monitoring of sensors that are managed by the software.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CV
Cyber Vision Center · Cisco
before 3.0.4 · source: NVD
Affected product
CV
Cyber Vision Center
Cisco
More from Cyber Vision Center
5.4
CVE-2025-20357
Cisco CyberVision Center Reports Stored Cross-Site Scripting Vulnerability
5.4
CVE-2025-20356
Cisco CyberVision Center Sensor Explorer Stored Cross-Site Scripting Vulnerability