CVE-2023-20097
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD
Description
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.
Affected (6)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.10.183.0 |
| Running on/with | Platform Versions |
|---|---|
Cisco Esw6300 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 17.9.0.135 |
| Running on/with | Platform Versions |
|---|---|
Cisco Aironet 1540 | All versions |
Cisco Aironet 1542d | All versions |
Cisco Aironet 1542i | All versions |
Cisco Aironet 1560 | All versions |
Cisco Aironet 1562d | All versions |
Cisco Aironet 1562e | All versions |
Cisco Aironet 1562i | All versions |
Cisco Aironet 1800 | All versions |
Cisco Aironet 1800i | All versions |
Cisco Aironet 1810 | All versions |
Cisco Aironet 1810w | All versions |
Cisco Aironet 1815 | All versions |
Cisco Aironet 1815i | All versions |
Cisco Aironet 1815m | All versions |
Cisco Aironet 1815t | All versions |
Cisco Aironet 1815w | All versions |
Cisco Aironet 2800 | All versions |
Cisco Aironet 2800e | All versions |
Cisco Aironet 2800i | All versions |
Cisco Aironet 3800 | All versions |
Cisco Aironet 3800e | All versions |
Cisco Aironet 3800i | All versions |
Cisco Aironet 3800p | All versions |
Cisco Aironet 4800 | All versions |
Cisco Catalyst 9100 | All versions |
Cisco Catalyst 9105 | All versions |
Cisco Catalyst 9105ax | All versions |
Cisco Catalyst 9105axi | All versions |
Cisco Catalyst 9105axw | All versions |
Cisco Catalyst 9115 | All versions |
Cisco Catalyst 9115 Ap | All versions |
Cisco Catalyst 9115ax | All versions |
Cisco Catalyst 9115axe | All versions |
Cisco Catalyst 9115axi | All versions |
Cisco Catalyst 9117 | All versions |
Cisco Catalyst 9117 Ap | All versions |
Cisco Catalyst 9117ax | All versions |
Cisco Catalyst 9117axi | All versions |
Cisco Catalyst 9120 | All versions |
Cisco Catalyst 9120 Ap | All versions |
Cisco Catalyst 9120ax | All versions |
Cisco Catalyst 9120axe | All versions |
Cisco Catalyst 9120axi | All versions |
Cisco Catalyst 9120axp | All versions |
Cisco Catalyst 9124 | All versions |
Cisco Catalyst 9124ax | All versions |
Cisco Catalyst 9124axd | All versions |
Cisco Catalyst 9124axi | All versions |
Cisco Catalyst 9130 | All versions |
Cisco Catalyst 9130 Ap | All versions |
Cisco Catalyst 9130ax | All versions |
Cisco Catalyst 9130axe | All versions |
Cisco Catalyst 9130axi | All versions |
Cisco Catalyst Iw6300 | All versions |
Cisco Catalyst Iw6300 Ac | All versions |
Cisco Catalyst Iw6300 Dc | All versions |
Cisco Catalyst Iw6300 Dcw | All versions |
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.