CVE-2020-3547

CVE-2020-3547 is a medium-severity vulnerability affecting Cisco AsyncOS software on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA). It allows an authenticated, remote attacker to access sensitive information, specifically certain masked passwords, by inspecting the raw HTML of the web-based management interface due to an insecure masking method. The CVSS score is 6.5, indicating high confidentiality impact with low attack complexity and no user interaction required. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.