CVE-2023-20077

🗓️ 18 May 2023 00:00:00Reported by ciscoType

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2023-20077	17 May 202316:00	–	attackerkb
Circl	CVE-2023-20077	18 May 202307:31	–	circl
Cisco	Cisco Identity Services Engine Arbitrary File Download Vulnerabilities	17 May 202316:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine 3.x < 3.2P1 Arbitrary File Download (cisco-sa-ise-file-dwnld-Srcdnkd2)	19 May 202300:00	–	nessus
CNNVD	Cisco Identity Services Engine 路径遍历漏洞	18 May 202300:00	–	cnnvd
CNVD	Cisco Identity Services Engine Arbitrary File Download Vulnerability	20 May 202300:00	–	cnvd
Cvelist	CVE-2023-20077 Cisco Identity Services Engine Arbitrary File Download Vulnerabilities	18 May 202300:00	–	cvelist
EUVD	EUVD-2023-24256	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Identity Services Engine (ISE).	19 May 202300:00	–	ncsc
NVD	CVE-2023-20077	18 May 202303:15	–	nvd

NVD

Node

cisco identity_services_engineRange≤3.1

cisco identity_services_engineMatch3.2-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Identity Services Engine Software",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-dwnld-Srcdnkd2

21 Nov 2024 07:40Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.9 - 6.5

EPSS0.00245

SSVC