CVE-2023-20273
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD
Description
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
Affected (189)
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 16.12 to 16.12.10a |
| Running on/with | Platform Versions |
|---|---|
Cisco Catalyst 3650 | All versions |
Cisco Catalyst 3650 12x48fd E | All versions |
Cisco Catalyst 3650 12x48fd L | All versions |
Cisco Catalyst 3650 12x48fd S | All versions |
Cisco Catalyst 3650 12x48uq | All versions |
Cisco Catalyst 3650 12x48uq E | All versions |
Cisco Catalyst 3650 12x48uq L | All versions |
Cisco Catalyst 3650 12x48uq S | All versions |
Cisco Catalyst 3650 12x48ur | All versions |
Cisco Catalyst 3650 12x48ur E | All versions |
Cisco Catalyst 3650 12x48ur L | All versions |
Cisco Catalyst 3650 12x48ur S | All versions |
Cisco Catalyst 3650 12x48uz | All versions |
Cisco Catalyst 3650 12x48uz E | All versions |
Cisco Catalyst 3650 12x48uz L | All versions |
Cisco Catalyst 3650 12x48uz S | All versions |
Cisco Catalyst 3650 24pd | All versions |
Cisco Catalyst 3650 24pd E | All versions |
Cisco Catalyst 3650 24pd L | All versions |
Cisco Catalyst 3650 24pd S | All versions |
Cisco Catalyst 3650 24pdm | All versions |
Cisco Catalyst 3650 24pdm E | All versions |
Cisco Catalyst 3650 24pdm L | All versions |
Cisco Catalyst 3650 24pdm S | All versions |
Cisco Catalyst 3650 24ps E | All versions |
Cisco Catalyst 3650 24ps L | All versions |
Cisco Catalyst 3650 24ps S | All versions |
Cisco Catalyst 3650 24td E | All versions |
Cisco Catalyst 3650 24td L | All versions |
Cisco Catalyst 3650 24td S | All versions |
Cisco Catalyst 3650 24ts E | All versions |
Cisco Catalyst 3650 24ts L | All versions |
Cisco Catalyst 3650 24ts S | All versions |
Cisco Catalyst 3650 48fd E | All versions |
Cisco Catalyst 3650 48fd L | All versions |
Cisco Catalyst 3650 48fd S | All versions |
Cisco Catalyst 3650 48fq | All versions |
Cisco Catalyst 3650 48fq E | All versions |
Cisco Catalyst 3650 48fq L | All versions |
Cisco Catalyst 3650 48fq S | All versions |
Cisco Catalyst 3650 48fqm | All versions |
Cisco Catalyst 3650 48fqm E | All versions |
Cisco Catalyst 3650 48fqm L | All versions |
Cisco Catalyst 3650 48fqm S | All versions |
Cisco Catalyst 3650 48fs E | All versions |
Cisco Catalyst 3650 48fs L | All versions |
Cisco Catalyst 3650 48fs S | All versions |
Cisco Catalyst 3650 48pd E | All versions |
Cisco Catalyst 3650 48pd L | All versions |
Cisco Catalyst 3650 48pd S | All versions |
Cisco Catalyst 3650 48pq E | All versions |
Cisco Catalyst 3650 48pq L | All versions |
Cisco Catalyst 3650 48pq S | All versions |
Cisco Catalyst 3650 48ps E | All versions |
Cisco Catalyst 3650 48ps L | All versions |
Cisco Catalyst 3650 48ps S | All versions |
Cisco Catalyst 3650 48td E | All versions |
Cisco Catalyst 3650 48td L | All versions |
Cisco Catalyst 3650 48td S | All versions |
Cisco Catalyst 3650 48tq E | All versions |
Cisco Catalyst 3650 48tq L | All versions |
Cisco Catalyst 3650 48tq S | All versions |
Cisco Catalyst 3650 48ts E | All versions |
Cisco Catalyst 3650 48ts L | All versions |
Cisco Catalyst 3650 48ts S | All versions |
Cisco Catalyst 3650 8x24pd E | All versions |
Cisco Catalyst 3650 8x24pd L | All versions |
Cisco Catalyst 3650 8x24pd S | All versions |
Cisco Catalyst 3650 8x24uq | All versions |
Cisco Catalyst 3650 8x24uq E | All versions |
Cisco Catalyst 3650 8x24uq L | All versions |
Cisco Catalyst 3650 8x24uq S | All versions |
Cisco Catalyst 3850 | All versions |
Cisco Catalyst 3850 12s E | All versions |
Cisco Catalyst 3850 12s S | All versions |
Cisco Catalyst 3850 12x48u | All versions |
Cisco Catalyst 3850 12xs E | All versions |
Cisco Catalyst 3850 12xs S | All versions |
Cisco Catalyst 3850 16xs E | All versions |
Cisco Catalyst 3850 16xs S | All versions |
Cisco Catalyst 3850 24p E | All versions |
Cisco Catalyst 3850 24p L | All versions |
Cisco Catalyst 3850 24p S | All versions |
Cisco Catalyst 3850 24pw S | All versions |
Cisco Catalyst 3850 24s E | All versions |
Cisco Catalyst 3850 24s S | All versions |
Cisco Catalyst 3850 24t E | All versions |
Cisco Catalyst 3850 24t L | All versions |
Cisco Catalyst 3850 24t S | All versions |
Cisco Catalyst 3850 24u | All versions |
Cisco Catalyst 3850 24u E | All versions |
Cisco Catalyst 3850 24u L | All versions |
Cisco Catalyst 3850 24u S | All versions |
Cisco Catalyst 3850 24xs | All versions |
Cisco Catalyst 3850 24xs E | All versions |
Cisco Catalyst 3850 24xs S | All versions |
Cisco Catalyst 3850 24xu | All versions |
Cisco Catalyst 3850 24xu E | All versions |
Cisco Catalyst 3850 24xu L | All versions |
Cisco Catalyst 3850 24xu S | All versions |
Cisco Catalyst 3850 32xs E | All versions |
Cisco Catalyst 3850 32xs S | All versions |
Cisco Catalyst 3850 48f E | All versions |
Cisco Catalyst 3850 48f L | All versions |
Cisco Catalyst 3850 48f S | All versions |
Cisco Catalyst 3850 48p E | All versions |
Cisco Catalyst 3850 48p L | All versions |
Cisco Catalyst 3850 48p S | All versions |
Cisco Catalyst 3850 48pw S | All versions |
Cisco Catalyst 3850 48t E | All versions |
Cisco Catalyst 3850 48t L | All versions |
Cisco Catalyst 3850 48t S | All versions |
Cisco Catalyst 3850 48u | All versions |
Cisco Catalyst 3850 48u E | All versions |
Cisco Catalyst 3850 48u L | All versions |
Cisco Catalyst 3850 48u S | All versions |
Cisco Catalyst 3850 48xs | All versions |
Cisco Catalyst 3850 48xs E | All versions |
Cisco Catalyst 3850 48xs F E | All versions |
Cisco Catalyst 3850 48xs F S | All versions |
Cisco Catalyst 3850 48xs S | All versions |
Cisco Catalyst 3850 Nm 2 40g | All versions |
Cisco Catalyst 3850 Nm 8 10g | All versions |
References (3)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource
Timeline
No history available yet.