Логотип exploitDog
bind:CVE-2020-3482
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-3482

Количество 3

Количество 3

nvd логотип

CVE-2020-3482

около 5 лет назад

A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker to bypass security controls and send network traffic to restricted destinations. The vulnerability is due to improper validation of specific connection information by the TURN server within the affected software. An attacker could exploit this issue by sending specially crafted network traffic to the affected software. A successful exploit could allow the attacker to send traffic through the affected software to destinations beyond the application, possibly allowing the attacker to gain unauthorized network access.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-r379-mpqq-hxmh

больше 3 лет назад

A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker to bypass security controls and send network traffic to restricted destinations. The vulnerability is due to improper validation of specific connection information by the TURN server within the affected software. An attacker could exploit this issue by sending specially crafted network traffic to the affected software. A successful exploit could allow the attacker to send traffic through the affected software to destinations beyond the application, possibly allowing the attacker to gain unauthorized network access.

EPSS: Низкий
fstec логотип

BDU:2020-05521

около 5 лет назад

Уязвимость механизмама защиты учетных данных сервера Traversal Using Relay NAT (TURN) программного обеспечения шлюза Cisco Expressway, позволяющая нарушителю получить несанкионированный доступ к защищаемой информации

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-3482

A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker to bypass security controls and send network traffic to restricted destinations. The vulnerability is due to improper validation of specific connection information by the TURN server within the affected software. An attacker could exploit this issue by sending specially crafted network traffic to the affected software. A successful exploit could allow the attacker to send traffic through the affected software to destinations beyond the application, possibly allowing the attacker to gain unauthorized network access.

CVSS3: 6.5
0%
Низкий
около 5 лет назад
github логотип
GHSA-r379-mpqq-hxmh

A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker to bypass security controls and send network traffic to restricted destinations. The vulnerability is due to improper validation of specific connection information by the TURN server within the affected software. An attacker could exploit this issue by sending specially crafted network traffic to the affected software. A successful exploit could allow the attacker to send traffic through the affected software to destinations beyond the application, possibly allowing the attacker to gain unauthorized network access.

0%
Низкий
больше 3 лет назад
fstec логотип
BDU:2020-05521

Уязвимость механизмама защиты учетных данных сервера Traversal Using Relay NAT (TURN) программного обеспечения шлюза Cisco Expressway, позволяющая нарушителю получить несанкионированный доступ к защищаемой информации

CVSS3: 6.5
0%
Низкий
около 5 лет назад

Уязвимостей на страницу