← Back

CVE-2023-20106

nvd nist
Published: May 18, 2023Modified: Nov 21, 2024

JSON object

Loading...
3.8
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Exploitability: 1.2 / Impact: 2.5
Source: NVD

Description

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected (7)

1 product
Identity Services Engine
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Version 3.1
Version 3.1 patch1
Version 3.1 patch3
Version 3.1 patch4
Version 3.1 patch5
Version 3.2
Version 3.2 patch1

Timeline

No history available yet.