CVE-2023-20210: falha de média gravidade em Cisco BroadWorks
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6epss 0.2%
A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device.
The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Cisco · Cisco BroadWorksCVEs relacionadas — Cisco BroadWorks
No mesmo produto, das mais perigosas para as menos.
CVE-2023-20238CRITICALCVE-2023-20238EPSS 15.1%CVE-2022-20951HIGHCVE-2022-20951EPSS 2.3%CVE-2021-34785MEDIUMCisco BroadWorks CommPilot Application Software VulnerabilitiesEPSS 1.3%CVE-2022-20958HIGHCVE-2022-20958EPSS 1.1%CVE-2021-1530MEDIUMCisco BroadWorks Messaging Server XML External Entity Injection VulnerabilityEPSS 1.1%CVE-2021-34786MEDIUMCisco BroadWorks CommPilot Application Software VulnerabilitiesEPSS 1.0%