CVE-2020-3448

A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal services that are running on an affected device. The vulnerability is due to insufficient enforcement of access control in the software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow an attacker to impact monitoring of sensors that are managed by the software.

• CWE-284
• CWE-306

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvc-bypass-K99Cb2ffVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvc-bypass-K99Cb2ffVendor Advisory

Published

Aug 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3441A vulnerability in Cisco Webex Meetings and Cisco Webex Meet…5.3
• CVE-2020-3442The DuoConnect client enables users to establish SSH connect…5.7
• CVE-2020-3443A vulnerability in Cisco Smart Software Manager On-Prem (SSM…8.8
• CVE-2020-3444A vulnerability in the packet filtering features of Cisco SD…7.5
• CVE-2020-3446A vulnerability in Cisco Virtual Wide Area Application Servi…9.8
• CVE-2020-3447A vulnerability in the CLI of Cisco AsyncOS for Cisco Email …6.5
• CVE-2020-3449A vulnerability in the Border Gateway Protocol (BGP) additio…4.3
• CVE-2020-3450A vulnerability in the web-based management interface of Cis…4.9
• CVE-2020-3451Multiple vulnerabilities in the web-based management interfa…4.7
• CVE-2020-3452A vulnerability in the web services interface of Cisco Adapt…7.5
• CVE-2020-3453Multiple vulnerabilities in the web-based management interfa…6.8
• CVE-2020-3454A vulnerability in the Call Home feature of Cisco NX-OS Soft…7.2