Lucene search
CiscoCISCO-SA-RDOCKER-UATBUKKNHistoryOct 04, 2023 - 4:00 p.m.
Cisco IOx Application Hosting Environment Privilege Escalation Vulnerability
2023-10-0416:00:00
tools.cisco.com
26
cisco
iox
application hosting
privilege escalation
vulnerability
docker
cisco ios xe
software update
EPSS
0.001
Percentile
33.5%
A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.
This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn”]
Affected configurations
Node
ciscocisco_ios_xe_softwareMatch17.3
ORciscocisco_ios_xe_softwareMatch17.4
ORciscocisco_ios_xe_softwareMatch17.5
ORciscocisco_ios_xe_softwareMatch17.6
ORciscocisco_ios_xe_softwareMatch17.7
ORciscocisco_ios_xe_softwareMatch17.10
ORciscocisco_ios_xe_softwareMatch17.8
ORciscocisco_ios_xe_softwareMatch17.9
ORciscocisco_ios_xe_softwareMatch17.11
ORciscocisco_ios_xe_softwareMatch17.12
ORciscocisco_ios_xe_softwareMatch17.11sw
ORciscocisco_ios_xe_softwareMatchany
ORciscocisco_ios_xe_softwareMatch17.3.1
ORciscocisco_ios_xe_softwareMatch17.3.2
ORciscocisco_ios_xe_softwareMatch17.3.3
ORciscocisco_ios_xe_softwareMatch17.3.1a
ORciscocisco_ios_xe_softwareMatch17.3.1w
ORciscocisco_ios_xe_softwareMatch17.3.2a
ORciscocisco_ios_xe_softwareMatch17.3.1x
ORciscocisco_ios_xe_softwareMatch17.3.1z
ORciscocisco_ios_xe_softwareMatch17.3.3a
ORciscocisco_ios_xe_softwareMatch17.3.4
ORciscocisco_ios_xe_softwareMatch17.3.5
ORciscocisco_ios_xe_softwareMatch17.3.4a
ORciscocisco_ios_xe_softwareMatch17.3.6
ORciscocisco_ios_xe_softwareMatch17.3.4b
ORciscocisco_ios_xe_softwareMatch17.3.4c
ORciscocisco_ios_xe_softwareMatch17.3.5a
ORciscocisco_ios_xe_softwareMatch17.3.5b
ORciscocisco_ios_xe_softwareMatch17.3.7
ORciscocisco_ios_xe_softwareMatch17.4.1
ORciscocisco_ios_xe_softwareMatch17.4.2
ORciscocisco_ios_xe_softwareMatch17.4.1a
ORciscocisco_ios_xe_softwareMatch17.4.1b
ORciscocisco_ios_xe_softwareMatch17.4.1c
ORciscocisco_ios_xe_softwareMatch17.4.2a
ORciscocisco_ios_xe_softwareMatch17.5.1
ORciscocisco_ios_xe_softwareMatch17.5.1a
ORciscocisco_ios_xe_softwareMatch17.5.1b
ORciscocisco_ios_xe_softwareMatch17.5.1c
ORciscocisco_ios_xe_softwareMatch17.6.1
ORciscocisco_ios_xe_softwareMatch17.6.2
ORciscocisco_ios_xe_softwareMatch17.6.1w
ORciscocisco_ios_xe_softwareMatch17.6.1a
ORciscocisco_ios_xe_softwareMatch17.6.1x
ORciscocisco_ios_xe_softwareMatch17.6.3
ORciscocisco_ios_xe_softwareMatch17.6.1y
ORciscocisco_ios_xe_softwareMatch17.6.1z
ORciscocisco_ios_xe_softwareMatch17.6.3a
ORciscocisco_ios_xe_softwareMatch17.6.4
ORciscocisco_ios_xe_softwareMatch17.6.1z1
ORciscocisco_ios_xe_softwareMatch17.6.5
ORciscocisco_ios_xe_softwareMatch17.6.5a
ORciscocisco_ios_xe_softwareMatch17.7.1
ORciscocisco_ios_xe_softwareMatch17.7.1a
ORciscocisco_ios_xe_softwareMatch17.7.1b
ORciscocisco_ios_xe_softwareMatch17.7.2
ORciscocisco_ios_xe_softwareMatch17.10.1
ORciscocisco_ios_xe_softwareMatch17.10.1a
ORciscocisco_ios_xe_softwareMatch17.10.1b
ORciscocisco_ios_xe_softwareMatch17.8.1
ORciscocisco_ios_xe_softwareMatch17.8.1a
ORciscocisco_ios_xe_softwareMatch17.9.1
ORciscocisco_ios_xe_softwareMatch17.9.1w
ORciscocisco_ios_xe_softwareMatch17.9.2
ORciscocisco_ios_xe_softwareMatch17.9.1a
ORciscocisco_ios_xe_softwareMatch17.9.1x
ORciscocisco_ios_xe_softwareMatch17.9.1y
ORciscocisco_ios_xe_softwareMatch17.9.3
ORciscocisco_ios_xe_softwareMatch17.9.2a
ORciscocisco_ios_xe_softwareMatch17.9.1x1
ORciscocisco_ios_xe_softwareMatch17.9.3a
ORciscocisco_ios_xe_softwareMatch17.9.4
ORciscocisco_ios_xe_softwareMatch17.9.1y1
ORciscocisco_ios_xe_softwareMatch17.9.4a
ORciscocisco_ios_xe_softwareMatch17.11.1
ORciscocisco_ios_xe_softwareMatch17.11.1a
ORciscocisco_ios_xe_softwareMatch17.12.1
ORciscocisco_ios_xe_softwareMatch17.12.1a
ORciscocisco_ios_xe_softwareMatch17.11.99sw
ORciscocisco_ios_xe_softwareMatchany
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | cisco_ios_xe_software | 17.3 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.3:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.4 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.4:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.5 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.5:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.6 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.6:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.7 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.7:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.10 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.10:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.8 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.8:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.9 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.9:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.11 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.11:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 17.12 | cpe:2.3:a:cisco:cisco_ios_xe_software:17.12:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2023-20235
2023-10-04 17:15:09
prion
prion
Design/Logic Flaw
2023-10-04 17:15:00
cve
cve
CVE-2023-20235
2023-10-04 17:15:09
cvelist
cvelist
CVE-2023-20235
2023-10-04 16:14:00
nessus
nessus