CVE-2023-20183: falha de média gravidade em Cisco Digital Network Architecture Center (DNA…
Cisco DNA Center Software API Vulnerabilities
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.5%
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Cisco · Cisco Digital Network Architecture Center (DNA Center)CVEs relacionadas — Cisco Digital Network Architecture Center (DNA…
No mesmo produto, das mais perigosas para as menos.
CVE-2021-1264CRITICALCisco DNA Center Command Runner Command Injection VulnerabilityEPSS 3.9%CVE-2018-15386—Cisco Digital Network Architecture Center Unauthenticated Access VulnerabilityEPSS 3.4%CVE-2019-15253MEDIUMCisco Digital Network Architecture Center Stored Cross-Site Scripting VulnerabilityEPSS 3.1%CVE-2019-1841MEDIUMCisco DNA Center Unintended Proxy Via SWIM Import Interface VulnerabilityEPSS 2.6%CVE-2020-3411HIGHCisco DNA Center Information Disclosure VulnerabilityEPSS 2.2%CVE-2018-0448—Cisco Digital Network Architecture Center Authentication Bypass VulnerabilityEPSS 2.1%