CVE-2023-20097

🗓️ 23 Mar 2023 00:00:00Reported by ciscoType

Vulnerability in Cisco AP software allows authenticated attacker to inject arbitrary commands and gain root access

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2023-20097	22 Mar 202316:00	–	attackerkb
Circl	CVE-2023-20097	23 Mar 202319:36	–	circl
Cisco	Cisco Access Point Software Command Injection Vulnerability	22 Mar 202316:00	–	cisco
CNNVD	Cisco Access Point 命令注入漏洞	23 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-20097 Cisco Access Point Software Command Injection Vulnerability	23 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-24276	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Access Points	23 Mar 202300:00	–	ncsc
NVD	CVE-2023-20097	23 Mar 202317:15	–	nvd
OSV	CVE-2023-20097	23 Mar 202317:15	–	osv
Prion	Input validation	23 Mar 202317:15	–	prion

NVD

Node

cisco wireless_lan_controller_softwareRange<8.10.183.0

AND

cisco esw6300Match-

Node

cisco aironet_access_point_softwareRange<17.9.0.135

AND

cisco aironet_1540Match-

cisco aironet_1542dMatch-

cisco aironet_1542iMatch-

cisco aironet_1560Match-

cisco aironet_1562dMatch-

cisco aironet_1562eMatch-

cisco aironet_1562iMatch-

cisco aironet_1800Match-

cisco aironet_1800iMatch-

cisco aironet_1810Match-

cisco aironet_1810wMatch-

cisco aironet_1815Match-

cisco aironet_1815iMatch-

cisco aironet_1815mMatch-

cisco aironet_1815tMatch-

cisco aironet_1815wMatch-

cisco aironet_2800Match-

cisco aironet_2800eMatch-

cisco aironet_2800iMatch-

cisco aironet_3800Match-

cisco aironet_3800eMatch-

cisco aironet_3800iMatch-

cisco aironet_3800pMatch-

cisco aironet_4800Match-

cisco catalyst_9100Match-

cisco catalyst_9105Match-

cisco catalyst_9105axMatch-

cisco catalyst_9105axiMatch-

cisco catalyst_9105axwMatch-

cisco catalyst_9115Match-

cisco catalyst_9115_apMatch-

cisco catalyst_9115axMatch-

cisco catalyst_9115axeMatch-

cisco catalyst_9115axiMatch-

cisco catalyst_9117Match-

cisco catalyst_9117_apMatch-

cisco catalyst_9117axMatch-

cisco catalyst_9117axiMatch-

cisco catalyst_9120Match-

cisco catalyst_9120_apMatch-

cisco catalyst_9120axMatch-

cisco catalyst_9120axeMatch-

cisco catalyst_9120axiMatch-

cisco catalyst_9120axpMatch-

cisco catalyst_9124Match-

cisco catalyst_9124axMatch-

cisco catalyst_9124axdMatch-

cisco catalyst_9124axiMatch-

cisco catalyst_9130Match-

cisco catalyst_9130_apMatch-

cisco catalyst_9130axMatch-

cisco catalyst_9130axeMatch-

cisco catalyst_9130axiMatch-

cisco catalyst_iw6300Match-

cisco catalyst_iw6300_acMatch-

cisco catalyst_iw6300_dcMatch-

cisco catalyst_iw6300_dcwMatch-

Node

cisco ios_xeRange<16.12.8

cisco ios_xeRange17.1–17.3.6

cisco ios_xeRange17.4–17.6.5

cisco ios_xeRange17.7–17.9.2

[
  {
    "vendor": "Cisco",
    "product": "Cisco Aironet Access Point Software",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironetap-cmdinj-6bjT4FL8

21 Nov 2024 07:40Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.6 - 6.7

EPSS0.00206

SSVC

CWE-77