CVE-2023-20175

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 1, 2023
Updated: Feb 1, 2024
CWE ID 78

Summary

CVE-2023-20175 is a vulnerability in a specific Cisco ISE CLI command that could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. The affected products include osX0wV, tVhU6P, osX0wW, nDKo5n, ojKXMk, nDKo5o, e3ocMq, e3ocMr, e3ocMp, ijBNpD, suWGLH, cGPl2t, cGPl2v, cGPl2u, hYTcWd, hYTcWc, fnGJUF, r0KAJ4, hYTcWe, hYTcWb, tVhU6Q, j9c1Ia,j9c1IZ,j9c1IY,kJdIKe,j9c1IX,j9c1IW,j9c1IU,nocEQN,nocEQM,nocEQO,mZPHjN,mZPHjP,mZPHjO,uKQev1. To remediate this vulnerability and prevent exploitation, Cisco recommends applying the relevant software patches or updates provided by the company. The potential danger of this vulnerability is that an attacker with valid Read-only-level privileges or higher could execute arbitrary commands on the affected device's operating system and gain root access to the system. This could lead to unauthorized control over the device and potentially compromise the organization's network security.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-20175 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options