cisco-sa-catc-file-read-wLH2vf8X

Cisco Catalyst Center Arbitrary File Read Vulnerability

Advisory ansehen veröffentlicht 2026-07-01

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-20191US	—	0.65% (51st)	—	2026-07-01
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.  This vulnerability is due to…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Security Vulnerability Policyexternal
Cisco Catalyst Center Arbitrary File Read Vulnerabilityself
Cisco Security Vulnerability Policyexternal
fixed software releaseexternal
Cisco Support and Downloadsexternal
Cisco Technical Assistance Center (TAC)external
the advisoriesexternal

Behebungen (17)

Behoben2.3.7.0-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben2.3.7.10-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben2.3.7.5-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben2.3.7.6-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben2.3.7.7-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben2.3.7.9-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.3-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.5-RevUp
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.5-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.5-VA on AWS
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.6-BETA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.6-GSMU100
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.6-VA
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.1.6-VA-GSMU100
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan