← Back

CVE-2023-20163

nvd nist
Published: May 18, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected (17)

1 product
Identity Services Engine
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Up to 2.7
Version 3.0.0
Version 3.0.0 patch1
Version 3.0.0 patch2
Version 3.0.0 patch3
Version 3.0.0 patch4
Version 3.0.0 patch5
Version 3.0.0 patch6
Version 3.0.0 patch7
Version 3.1
Version 3.1 patch1
Version 3.1 patch3
Version 3.1 patch4
Version 3.1 patch5
Version 3.1 patch6
Version 3.2
Version 3.2 patch1

Timeline

No history available yet.