CVE-2023-20273

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Oct 25, 2023
Updated: Jan 25, 2024
CWE ID 78

Summary

CVE-2023-20273 is a vulnerability in the web UI feature of Cisco IOS XE Software that could allow an authenticated, remote attacker to inject commands with root privileges. The vulnerability is due to insufficient input validation, and an attacker can exploit it by sending crafted input to the web UI. Affected products include nbt3U_, lgHYyW, tIgB4I, qkbFVi, and others. To remediate this vulnerability, it is recommended to apply the necessary updates or patches provided by Cisco. The potential danger posed by this vulnerability is high, as an attacker could execute arbitrary commands with root privileges on the underlying operating system, potentially compromising the organization's network security and data integrity.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-20273 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options