Exploit for Improper Input Validation in Cisco Adaptive Security Appliance Software

githubexploit · 2020-08-03

Description

Improper Input Validation in Cisco Adaptive Security Appliance, CVE-2020-3452, directory traversal, educational utilit

Entry point

Parametertype · query param

Path/+CSCOT+/translation-table

Path traversal via crafted requests to translation-table endpoint exposing web services file system contents.

Affected Cisco Adaptive Security Appliance Software versions

Cisco Adaptive Security Appliance Software< 9.6.4.42, 9.8.4.20, 9.9.2.74, 9.10.1.42, 9.12.3.12, 9.13.1.10, 9.14.1.10

All known vulnerabilities by product

Cisco Asa Cisco Ftd

CVSS 7.5 for CVE-2020-3452

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Working code

100%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2022-07-06 09:55

Last Seen:2025-08-31 20:50

Reporter:paran0id34

Written in:Python

Last commit:2021-06-02

Tags

ciscoinput validationCVE-2020-3452directory traversaleducationalethical testing

Other exploits for CVE-2020-3452

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

2026-05-16 curtishoughtonGITHUB

ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan

2021-12-27 KitPloitKITPLOIT

ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan

2021-12-01 KitPloitKITPLOIT

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

2021-02-04 faisalfs10xGITHUB

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

2021-02-03 fuzzloveGITHUB

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

2021-01-24 NULLGITEE

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

2021-01-05 darklotuskdbGITHUB

Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2)

2020-12-15 FreakyclownEXPLOITDBPython

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=1A3E21B6-FA92-54E8-9E68-C428AED33899
# CVE-2020-3452
CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense

This utility is made for educational and ethical testing purposes only. Usage of this script for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developer assumes no liability and is not responsible for any misuse or damage caused by this program.