Lucene search

[email protected]CVE-2023-20105

HistoryJun 28, 2023 - 3:15 p.m.

CVE-2023-20105

2023-06-2815:15:09

CWE-20

[email protected]

web.nvd.nist.gov

787

cisco

expressway

telepresence

vcs

vulnerability

password change

remote attacker

privilege escalation

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with Read-only credentials to elevate privileges to Administrator on an affected system.

This vulnerability is due to incorrect handling of password change requests. An attacker could exploit this vulnerability by authenticating to the application as a Read-only user and sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user.

Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device.

Affected configurations

NVD

Node

ciscotelepresence_video_communication_serverRange≤x14.0.3expressway

Node

ciscotelepresence_video_communication_serverRange≤x14.0.3

CPENameOperatorVersion
cisco:telepresence_video_communication_servercisco telepresence video communication serverlex14.0.3

CPE	Name	Operator	Version
cisco:telepresence_video_communication_server	cisco telepresence video communication server	le	x14.0.3

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
    "versions": [
      {
        "version": "X8.5.1",
        "status": "affected"
      },
      {
        "version": "X8.5.3",
        "status": "affected"
      },
      {
        "version": "X8.5",
        "status": "affected"
      },
      {
        "version": "X8.6.1",
        "status": "affected"
      },
      {
        "version": "X8.6",
        "status": "affected"
      },
      {
        "version": "X8.1.1",
        "status": "affected"
      },
      {
        "version": "X8.1.2",
        "status": "affected"
      },
      {
        "version": "X8.1",
        "status": "affected"
      },
      {
        "version": "X8.2.1",
        "status": "affected"
      },
      {
        "version": "X8.2.2",
        "status": "affected"
      },
      {
        "version": "X8.2",
        "status": "affected"
      },
      {
        "version": "X8.7.1",
        "status": "affected"
      },
      {
        "version": "X8.7.2",
        "status": "affected"
      },
      {
        "version": "X8.7.3",
        "status": "affected"
      },
      {
        "version": "X8.7",
        "status": "affected"
      },
      {
        "version": "X8.8.1",
        "status": "affected"
      },
      {
        "version": "X8.8.2",
        "status": "affected"
      },
      {
        "version": "X8.8.3",
        "status": "affected"
      },
      {
        "version": "X8.8",
        "status": "affected"
      },
      {
        "version": "X8.9.1",
        "status": "affected"
      },
      {
        "version": "X8.9.2",
        "status": "affected"
      },
      {
        "version": "X8.9",
        "status": "affected"
      },
      {
        "version": "X8.10.0",
        "status": "affected"
      },
      {
        "version": "X8.10.1",
        "status": "affected"
      },
      {
        "version": "X8.10.2",
        "status": "affected"
      },
      {
        "version": "X8.10.3",
        "status": "affected"
      },
      {
        "version": "X8.10.4",
        "status": "affected"
      },
      {
        "version": "X12.5.8",
        "status": "affected"
      },
      {
        "version": "X12.5.9",
        "status": "affected"
      },
      {
        "version": "X12.5.0",
        "status": "affected"
      },
      {
        "version": "X12.5.2",
        "status": "affected"
      },
      {
        "version": "X12.5.7",
        "status": "affected"
      },
      {
        "version": "X12.5.3",
        "status": "affected"
      },
      {
        "version": "X12.5.4",
        "status": "affected"
      },
      {
        "version": "X12.5.5",
        "status": "affected"
      },
      {
        "version": "X12.5.1",
        "status": "affected"
      },
      {
        "version": "X12.5.6",
        "status": "affected"
      },
      {
        "version": "X12.6.0",
        "status": "affected"
      },
      {
        "version": "X12.6.1",
        "status": "affected"
      },
      {
        "version": "X12.6.2",
        "status": "affected"
      },
      {
        "version": "X12.6.3",
        "status": "affected"
      },
      {
        "version": "X12.6.4",
        "status": "affected"
      },
      {
        "version": "X12.7.0",
        "status": "affected"
      },
      {
        "version": "X12.7.1",
        "status": "affected"
      },
      {
        "version": "X8.11.1",
        "status": "affected"
      },
      {
        "version": "X8.11.2",
        "status": "affected"
      },
      {
        "version": "X8.11.4",
        "status": "affected"
      },
      {
        "version": "X8.11.3",
        "status": "affected"
      },
      {
        "version": "X8.11.0",
        "status": "affected"
      },
      {
        "version": "X14.0.1",
        "status": "affected"
      },
      {
        "version": "X14.0.3",
        "status": "affected"
      },
      {
        "version": "X14.0.2",
        "status": "affected"
      },
      {
        "version": "X14.0.4",
        "status": "affected"
      },
      {
        "version": "X14.0.5",
        "status": "affected"
      },
      {
        "version": "X14.0.6",
        "status": "affected"
      },
      {
        "version": "X14.0.7",
        "status": "affected"
      },
      {
        "version": "X14.0.8",
        "status": "affected"
      },
      {
        "version": "X14.0.9",
        "status": "affected"
      },
      {
        "version": "X14.0.10",
        "status": "affected"
      },
      {
        "version": "X14.0.11",
        "status": "affected"
      },
      {
        "version": "X14.2.1",
        "status": "affected"
      },
      {
        "version": "X14.2.0",
        "status": "affected"
      }
    ]
  }
]