CVE-2023-20015

🗓️ 23 Feb 2023 00:00:00Reported by ciscoType

A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute unauthorized commands within the CLI

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2023-20015	23 Feb 202300:00	–	attackerkb
Circl	CVE-2023-20015	23 Feb 202322:18	–	circl
Cisco	Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability	22 Feb 202316:00	–	cisco
Tenable Nessus	Cisco Firepower 4100 Series and Firepower 9300 Security Appliances Command Injection (cisco-sa-nxfp-cmdinj-XXBZjtR)	24 Feb 202300:00	–	nessus
Tenable Nessus	Cisco UCS Fabric Interconnects Command Injection (cisco-sa-nxfp-cmdinj-XXBZjtR)	24 Feb 202300:00	–	nessus
CNNVD	Cisco Firepower 4100 Series和Cisco Firepower 9300 Security Appliance 操作系统命令注入漏洞	23 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-20015 Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability	23 Feb 202300:00	–	cvelist
EUVD	EUVD-2023-24194	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Firepower and UCS Fabric Interconnect systems	24 Feb 202300:00	–	ncsc
NVD	CVE-2023-20015	23 Feb 202320:15	–	nvd

NVD

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6536_firmwareMatch-

AND

cisco ucs_6536Match-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_64108_firmwareMatch-

AND

cisco ucs_64108Match-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6454_firmwareMatch-

AND

cisco ucs_6454Match-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6200_firmwareMatch-

AND

cisco ucs_6200Match-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6248up_firmwareMatch-

AND

cisco ucs_6248upMatch-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6296up_firmwareMatch-

AND

cisco ucs_6296upMatch-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6300_firmwareMatch-

AND

cisco ucs_6300Match-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6324_firmwareMatch-

AND

cisco ucs_6324Match-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6332_firmwareMatch-

AND

cisco ucs_6332Match-

Node

cisco ucs_central_softwareRange4.0–4.0(4o)

cisco ucs_central_softwareRange4.1–4.1(3k)

cisco ucs_central_softwareRange4.2–4.2(2d)

cisco ucs_6332-16up_firmwareMatch-

AND

cisco ucs_6332-16upMatch-

Node

cisco firepower_extensible_operating_systemMatch-

AND

cisco firepower_4100Match-

cisco firepower_4110Match-

cisco firepower_4112Match-

cisco firepower_4115Match-

cisco firepower_4120Match-

cisco firepower_4125Match-

cisco firepower_4140Match-

cisco firepower_4145Match-

cisco firepower_4150Match-

cisco firepower_9300_sm-24Match-

cisco firepower_9300_sm-36Match-

cisco firepower_9300_sm-40Match-

cisco firepower_9300_sm-44Match-

cisco firepower_9300_sm-44_x_3Match-

cisco firepower_9300_sm-48Match-

cisco firepower_9300_sm-56Match-

cisco firepower_9300_sm-56_x_3Match-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Unified Computing System (Managed)",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxfp-cmdinj-XXBZjtR

21 Nov 2024 07:40Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16 - 6.7

EPSS0.00114

SSVC

CWE-78