CVE-2023-20185
CVSS 3.1 Score 7.4 of 10 (high)
Details
Published Jul 12, 2023
Updated: Jan 25, 2024
CWE ID 326
CWE ID 330
Summary
CVE-2023-20185 is a vulnerability affecting the Cisco ACI Multi-Site CloudSec encryption feature on Cisco Nexus 9000 Series Fabric Switches in ACI mode. This issue allows unauthenticated, remote attackers with an on-path position between ACI sites to intercept and decrypt intersite encrypted traffic using cryptanalytic techniques. As a result, attackers can read or modify the data transmitted between the sites. Unfortunately, Cisco has not released any software updates to address this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Cisco NX-OS
Affected Vendors
- Cisco Systems Inc
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
Note: This is just a basic overview providing quick insights into CVE-2023-20185 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions