VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Nov 17, 2020· Updated Jun 17, 2026

CVE-2020-27130

CVE-2020-27130

Description

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to download arbitrary files from the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Cisco Systems, Inc./Security Manager3 versions
    cpe:2.3:a:cisco:security_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:security_manager:*:*:*:*:*:*:*:*range: <=4.21
    • (no CPE)
    • (no CPE)range: n/a

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.