CVE-2020-3122 Cisco Content Security Management Appliance Information Disclosure Vulnerability
Unauthenticated remote attackers can obtain sensitive network information via the web-based management interface of Cisco Content Security Management Appliances.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-3122?
CVE-2020-3122 is a medium-severity vulnerability in Cisco Asyncos, published on 4 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information.
Weakness: CWE-284
Which versions are affected by CVE-2020-3122?
It affects 1 product.
Products include Cisco Asyncos.
How do I fix CVE-2020-3122?
No fix has been published for CVE-2020-3122 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-3122 being exploited?
There is no known exploitation of CVE-2020-3122 in the wild and no public exploit code.
Other vulnerabilities in Cisco Asyncos
- CVE-2025-20393 Cisco Multiple Products Improper Input Validation
- CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal
- CVE-2026-76461 Cisco Secure Email Gateway SQL Injection
- CVE-2024-20435 Command injection in Cisco Secure Web Appliance
- CVE-2019-15956 Cisco Web Security Appliance Unauthorized Device Reset Vulnerability
Sources
Also known as GHSA-5j8p-9vxc-hp7x.