CVE-2023-20195

Summary

CVE-2023-20195 refers to two vulnerabilities in Cisco ISE that allow authenticated, remote attackers to upload arbitrary files to affected devices, provided they have valid Administrator credentials. These vulnerabilities arise from improper validation of uploaded files in the web-based management interface. An attacker could exploit these flaws by uploading maliciously crafted files, which could then be stored in specific directories on the device. Subsequent attacks, including code execution with root privileges, may be possible using these malicious files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.