# 思科防火墙Web只读路径遍历漏洞
## 漏洞概述
Cisco Adaptive Security Appliance (ASA) Software 和 Cisco Firepower Threat Defense (FTD) Software 的 Web 服务接口中存在漏洞，允许未经过身份验证的远程攻击者进行目录遍历攻击并读取目标系统上的敏感文件。
## 影响版本
未指定具体版本信息。
## 漏洞细节
- 漏洞原因：HTTP 请求中的 URL 缺少适当的输入验证。
- 攻击方式：攻击者可以发送一个精心制作的包含目录遍历字符序列的 HTTP 请求。
- 漏洞利用：成功利用此漏洞可以查看目标设备 Web 服务文件系统中的任意文件。
- 条件：漏洞仅在设备配置了 WebVPN 或 AnyConnect 特性时存在。
## 影响
- 攻击者可读取 Web 服务文件系统上的任意文件。
- 该漏洞无法用于获取 ASA 或 FTD 系统文件或底层操作系统文件的访问权限。
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | None | https://github.com/XDev05/CVE-2020-3452-PoC | POC详情 |
| 2 | unauth file read in cisco asa & firepower. | https://github.com/Loneyers/cve-2020-3452 | POC详情 |
| 3 | CVE-2020-3452 Cisco ASA Scanner -unauth Path Traversal Check | https://github.com/PR3R00T/CVE-2020-3452-Cisco-Scanner | POC详情 |
| 4 | None | https://github.com/mr-r3b00t/CVE-2020-3452 | POC详情 |
| 5 | Little, stupid python validator(?) for CVE-2020-3452 on CISCO devices. | https://github.com/foulenzer/CVE-2020-3452 | POC详情 |
| 6 | CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script | https://github.com/Gh0st0ne/http-vuln-cve2020-3452.nse | POC详情 |
| 7 | CVE-2020-3452 exploit | https://github.com/0x5ECF4ULT/CVE-2020-3452 | POC详情 |
| 8 | CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense | https://github.com/paran0id34/CVE-2020-3452 | POC详情 |
| 9 | [CVE-2020-3452] Cisco Adaptive Security Appliance (ASA) & Cisco Firepower Threat Defense (FTD) Web Service Read-Only Directory Traversal | https://github.com/murataydemir/CVE-2020-3452 | POC详情 |
| 10 | (CVE-2020-3452) Cisco Adaptive Security Appliance Software - Local File Inclusion Vuln Test sciript | https://github.com/ludy-dev/Cisco-ASA-LFI | POC详情 |
| 11 | Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances. | https://github.com/3ndG4me/CVE-2020-3452-Exploit | POC详情 |
| 12 | CVE-2020-3452 | https://github.com/grim3/CVE-2020-3452 | POC详情 |
| 13 | None | https://github.com/cygenta/CVE-2020-3452 | POC详情 |
| 14 | CISCO CVE-2020-3452 Scanner & Exploiter | https://github.com/darklotuskdb/CISCO-CVE-2020-3452-Scanner-Exploiter | POC详情 |
| 15 | CVE-2020-3452 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) traversal | https://github.com/fuzzlove/Cisco-ASA-FTD-Web-Services-Traversal | POC详情 |
| 16 | simple bash script of CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability checker | https://github.com/faisalfs10x/Cisco-CVE-2020-3452-shodan-scanner | POC详情 |
| 17 | None | https://github.com/sujaygr8/CVE-2020-3452 | POC详情 |
| 18 | Test vulnerability of CVE-2020-3452 | https://github.com/Aviksaikat/CVE-2020-3452 | POC详情 |
| 19 | None | https://github.com/Veids/CVE-2020-3452_auto | POC详情 |
| 20 | Just proof of concept for Cisco CVE-2020-3452. Using external or internal file base. | https://github.com/iveresk/cve-2020-3452 | POC详情 |
| 21 | Exploitation Scanner CVE-2020-3452 to enumerate the standard files accessible in the Path Traversal of CISCO ASA/FTD .🔥 | https://github.com/imhunterand/CVE-2020-3452 | POC详情 |
| 22 | Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion | https://github.com/Cappricio-Securities/CVE-2020-3452 | POC详情 |
| 23 | Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processed by an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device. The web services file system is enabled when the affected device is configured with either WebVPN or AnyConnect features. This vulnerability cannot be used to obtain access to ASA or FTD system files or underlying operating system (OS) files. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3452.yaml | POC详情 |
| 24 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87%E6%BC%8F%E6%B4%9E/Cisco%20ASA%E8%AE%BE%E5%A4%87%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20CVE-2020-3452.md | POC详情 |
| 25 | None | https://github.com/chaitin/xray-plugins/blob/main/poc/manual/cisco-cve-2020-3452-readfile.yml | POC详情 |
| 26 | Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only. | https://github.com/abrewer251/CVE-2020-3452_Cisco_ASA_PathTraversal | POC详情 |
暂无评论