CVE-2020-3117

CVE-2020-3117 is a medium-severity vulnerability in the API Framework of Cisco AsyncOS for Web Security Appliance (WSA) and Content Security Management Appliance (SMA). It allows an unauthenticated, remote attacker to inject crafted HTTP headers into a web server's response due to insufficient user input validation. The attack requires user interaction, as the attacker must persuade a user to access a crafted URL. A successful exploit could lead to the injection of arbitrary HTTP headers, but there is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.