CVE-2020-3546

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are sent to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the interface of an affected device. A successful exploit could allow the attacker to obtain the IP addresses that are configured on the internal interfaces of the affected device. There is a workaround that addresses this vulnerability.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-info-disclosure-vMJMMgJVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-info-disclosure-vMJMMgJVendor Advisory

Published

Sep 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35454The Taidii Diibear Android application 2.4.0 and all its der…6.8
• CVE-2020-35455The Taidii Diibear Android application 2.4.0 and all its der…7.8
• CVE-2020-35456The Taidii Diibear Android application 2.4.0 and all its der…5.5
• CVE-2020-35457GNOME GLib before 2.65.3 has an integer overflow, that might…7.8
• CVE-2020-35458An issue was discovered in ClusterLabs Hawk 2.x through 2.3.…9.8
• CVE-2020-35459An issue was discovered in ClusterLabs crmsh through 4.2.1. …7.8
• CVE-2020-35460common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 …5.3
• CVE-2020-35462Version 3.16.0 of the CoScale agent Docker image contains a …9.8
• CVE-2020-35463Version 1.0.0 of the Instana Dynamic APM Docker image contai…9.8
• CVE-2020-35464Version 1.3.0 of the Weave Cloud Agent Docker image contains…9.8
• CVE-2020-35465Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-35466The Blackfire Docker image through 2020-12-14 contains a bla…9.8