CVE-2023-20238

Summary

CVE-2023-20238 is a vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform. It allows an unauthenticated, remote attacker to forge credentials and gain unauthorized access to the affected system. The vulnerability arises from the flawed method used to validate SSO tokens. An attacker with a valid user ID associated with the affected Cisco BroadWorks system could exploit this vulnerability to commit toll fraud or execute commands at the privilege level of the forged account. If the account is an Administrator account, the attacker could view confidential information, modify customer settings, or alter settings for other users. The vulnerability poses a high risk to organizations as it could result in financial losses, data breaches, and unauthorized system manipulation. To remediate this vulnerability, it is recommended to apply patches or updates provided by Cisco for the affected products.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.