CVE-2023-20184

2023-05-1803:15:11

CWE-552

CWE-285

[email protected]

web.nvd.nist.gov

cisco

dna center

software

api

vulnerabilities

remote attacker

restricted info

users

commands

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.7%

JSON

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

NVD

Node

ciscodna_centerRange<2.2.3.5

CPENameOperatorVersion
cisco:dna_centercisco dna centerlt2.2.3.5

CPE	Name	Operator	Version
cisco:dna_center	cisco dna center	lt	2.2.3.5

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Digital Network Architecture Center (DNA Center) ",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]