Lucene search

[email protected]CVE-2023-20183

HistoryMay 18, 2023 - 3:15 a.m.

CVE-2023-20183

2023-05-1803:15:11

CWE-552

CWE-285

[email protected]

web.nvd.nist.gov

cisco

dna center

api

vulnerabilities

cisco dna center software

remote attacker

information security

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

23.2%

JSON

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.

CPENameOperatorVersion
cisco:dna_centercisco dna centerlt2.3.3.7
cisco:dna_centercisco dna centereq1.3.0.6
cisco:dna_centercisco dna centereq1.3.3.9
cisco:dna_centercisco dna centereq2.2.2.3
cisco:dna_centercisco dna centereq2.1.1.0
cisco:dna_centercisco dna centereq2.2.3.3
cisco:dna_centercisco dna centereq1.2.12.2
cisco:dna_centercisco dna centereq1.3.1.2
cisco:dna_centercisco dna centereq2.2.1.0
cisco:dna_centercisco dna centereq1.2.10

CPE	Name	Operator	Version
cisco:dna_center	cisco dna center	lt	2.3.3.7
cisco:dna_center	cisco dna center	eq	1.3.0.6
cisco:dna_center	cisco dna center	eq	1.3.3.9
cisco:dna_center	cisco dna center	eq	2.2.2.3
cisco:dna_center	cisco dna center	eq	2.1.1.0
cisco:dna_center	cisco dna center	eq	2.2.3.3
cisco:dna_center	cisco dna center	eq	1.2.12.2
cisco:dna_center	cisco dna center	eq	1.3.1.2
cisco:dna_center	cisco dna center	eq	2.2.1.0
cisco:dna_center	cisco dna center	eq	1.2.10

Rows per page:

1-10 of 691

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-multiple-kTQkGU3

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

23.2%

JSON

Related for CVE-2023-20183

prion1 cvelist1 nessus1 cisco1