Lucene search

K
cve[email protected]CVE-2023-20273
HistoryOct 25, 2023 - 6:17 p.m.

CVE-2023-20273

2023-10-2518:17:23
CWE-78
web.nvd.nist.gov
248
In Wild
91
cisco
ios
xe
software
vulnerability
remote attacker
command injection
nvd
cve-2023-20273

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.036 Low

EPSS

Percentile

91.8%

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.

Affected configurations

NVD
Node
ciscoios_xeRange17.317.3.8a
OR
ciscoios_xeRange17.617.6.6a
OR
ciscoios_xeRange17.917.9.4a
Node
ciscoios_xeRange16.1216.12.10a
AND
ciscocatalyst_3650Match-
OR
ciscocatalyst_3650-12x48fd-eMatch-
OR
ciscocatalyst_3650-12x48fd-lMatch-
OR
ciscocatalyst_3650-12x48fd-sMatch-
OR
ciscocatalyst_3650-12x48uqMatch-
OR
ciscocatalyst_3650-12x48uq-eMatch-
OR
ciscocatalyst_3650-12x48uq-lMatch-
OR
ciscocatalyst_3650-12x48uq-sMatch-
OR
ciscocatalyst_3650-12x48urMatch-
OR
ciscocatalyst_3650-12x48ur-eMatch-
OR
ciscocatalyst_3650-12x48ur-lMatch-
OR
ciscocatalyst_3650-12x48ur-sMatch-
OR
ciscocatalyst_3650-12x48uzMatch-
OR
ciscocatalyst_3650-12x48uz-eMatch-
OR
ciscocatalyst_3650-12x48uz-lMatch-
OR
ciscocatalyst_3650-12x48uz-sMatch-
OR
ciscocatalyst_3650-24pdMatch-
OR
ciscocatalyst_3650-24pd-eMatch-
OR
ciscocatalyst_3650-24pd-lMatch-
OR
ciscocatalyst_3650-24pd-sMatch-
OR
ciscocatalyst_3650-24pdmMatch-
OR
ciscocatalyst_3650-24pdm-eMatch-
OR
ciscocatalyst_3650-24pdm-lMatch-
OR
ciscocatalyst_3650-24pdm-sMatch-
OR
ciscocatalyst_3650-24ps-eMatch-
OR
ciscocatalyst_3650-24ps-lMatch-
OR
ciscocatalyst_3650-24ps-sMatch-
OR
ciscocatalyst_3650-24td-eMatch-
OR
ciscocatalyst_3650-24td-lMatch-
OR
ciscocatalyst_3650-24td-sMatch-
OR
ciscocatalyst_3650-24ts-eMatch-
OR
ciscocatalyst_3650-24ts-lMatch-
OR
ciscocatalyst_3650-24ts-sMatch-
OR
ciscocatalyst_3650-48fd-eMatch-
OR
ciscocatalyst_3650-48fd-lMatch-
OR
ciscocatalyst_3650-48fd-sMatch-
OR
ciscocatalyst_3650-48fqMatch-
OR
ciscocatalyst_3650-48fq-eMatch-
OR
ciscocatalyst_3650-48fq-lMatch-
OR
ciscocatalyst_3650-48fq-sMatch-
OR
ciscocatalyst_3650-48fqmMatch-
OR
ciscocatalyst_3650-48fqm-eMatch-
OR
ciscocatalyst_3650-48fqm-lMatch-
OR
ciscocatalyst_3650-48fqm-sMatch-
OR
ciscocatalyst_3650-48fs-eMatch-
OR
ciscocatalyst_3650-48fs-lMatch-
OR
ciscocatalyst_3650-48fs-sMatch-
OR
ciscocatalyst_3650-48pd-eMatch-
OR
ciscocatalyst_3650-48pd-lMatch-
OR
ciscocatalyst_3650-48pd-sMatch-
OR
ciscocatalyst_3650-48pq-eMatch-
OR
ciscocatalyst_3650-48pq-lMatch-
OR
ciscocatalyst_3650-48pq-sMatch-
OR
ciscocatalyst_3650-48ps-eMatch-
OR
ciscocatalyst_3650-48ps-lMatch-
OR
ciscocatalyst_3650-48ps-sMatch-
OR
ciscocatalyst_3650-48td-eMatch-
OR
ciscocatalyst_3650-48td-lMatch-
OR
ciscocatalyst_3650-48td-sMatch-
OR
ciscocatalyst_3650-48tq-eMatch-
OR
ciscocatalyst_3650-48tq-lMatch-
OR
ciscocatalyst_3650-48tq-sMatch-
OR
ciscocatalyst_3650-48ts-eMatch-
OR
ciscocatalyst_3650-48ts-lMatch-
OR
ciscocatalyst_3650-48ts-sMatch-
OR
ciscocatalyst_3650-8x24pd-eMatch-
OR
ciscocatalyst_3650-8x24pd-lMatch-
OR
ciscocatalyst_3650-8x24pd-sMatch-
OR
ciscocatalyst_3650-8x24uqMatch-
OR
ciscocatalyst_3650-8x24uq-eMatch-
OR
ciscocatalyst_3650-8x24uq-lMatch-
OR
ciscocatalyst_3650-8x24uq-sMatch-
OR
ciscocatalyst_3850Match-
OR
ciscocatalyst_3850-12s-eMatch-
OR
ciscocatalyst_3850-12s-sMatch-
OR
ciscocatalyst_3850-12x48uMatch-
OR
ciscocatalyst_3850-12xs-eMatch-
OR
ciscocatalyst_3850-12xs-sMatch-
OR
ciscocatalyst_3850-16xs-eMatch-
OR
ciscocatalyst_3850-16xs-sMatch-
OR
ciscocatalyst_3850-24p-eMatch-
OR
ciscocatalyst_3850-24p-lMatch-
OR
ciscocatalyst_3850-24p-sMatch-
OR
ciscocatalyst_3850-24pw-sMatch-
OR
ciscocatalyst_3850-24s-eMatch-
OR
ciscocatalyst_3850-24s-sMatch-
OR
ciscocatalyst_3850-24t-eMatch-
OR
ciscocatalyst_3850-24t-lMatch-
OR
ciscocatalyst_3850-24t-sMatch-
OR
ciscocatalyst_3850-24uMatch-
OR
ciscocatalyst_3850-24u-eMatch-
OR
ciscocatalyst_3850-24u-lMatch-
OR
ciscocatalyst_3850-24u-sMatch-
OR
ciscocatalyst_3850-24xsMatch-
OR
ciscocatalyst_3850-24xs-eMatch-
OR
ciscocatalyst_3850-24xs-sMatch-
OR
ciscocatalyst_3850-24xuMatch-
OR
ciscocatalyst_3850-24xu-eMatch-
OR
ciscocatalyst_3850-24xu-lMatch-
OR
ciscocatalyst_3850-24xu-sMatch-
OR
ciscocatalyst_3850-32xs-eMatch-
OR
ciscocatalyst_3850-32xs-sMatch-
OR
ciscocatalyst_3850-48f-eMatch-
OR
ciscocatalyst_3850-48f-lMatch-
OR
ciscocatalyst_3850-48f-sMatch-
OR
ciscocatalyst_3850-48p-eMatch-
OR
ciscocatalyst_3850-48p-lMatch-
OR
ciscocatalyst_3850-48p-sMatch-
OR
ciscocatalyst_3850-48pw-sMatch-
OR
ciscocatalyst_3850-48t-eMatch-
OR
ciscocatalyst_3850-48t-lMatch-
OR
ciscocatalyst_3850-48t-sMatch-
OR
ciscocatalyst_3850-48uMatch-
OR
ciscocatalyst_3850-48u-eMatch-
OR
ciscocatalyst_3850-48u-lMatch-
OR
ciscocatalyst_3850-48u-sMatch-
OR
ciscocatalyst_3850-48xsMatch-
OR
ciscocatalyst_3850-48xs-eMatch-
OR
ciscocatalyst_3850-48xs-f-eMatch-
OR
ciscocatalyst_3850-48xs-f-sMatch-
OR
ciscocatalyst_3850-48xs-sMatch-
OR
ciscocatalyst_3850-nm-2-40gMatch-
OR
ciscocatalyst_3850-nm-8-10gMatch-

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XE Software",
    "versions": [
      {
        "version": "16.1.1",
        "status": "affected"
      },
      {
        "version": "16.1.2",
        "status": "affected"
      },
      {
        "version": "16.1.3",
        "status": "affected"
      },
      {
        "version": "16.2.1",
        "status": "affected"
      },
      {
        "version": "16.2.2",
        "status": "affected"
      },
      {
        "version": "16.3.1",
        "status": "affected"
      },
      {
        "version": "16.3.2",
        "status": "affected"
      },
      {
        "version": "16.3.3",
        "status": "affected"
      },
      {
        "version": "16.3.1a",
        "status": "affected"
      },
      {
        "version": "16.3.4",
        "status": "affected"
      },
      {
        "version": "16.3.5",
        "status": "affected"
      },
      {
        "version": "16.3.5b",
        "status": "affected"
      },
      {
        "version": "16.3.6",
        "status": "affected"
      },
      {
        "version": "16.3.7",
        "status": "affected"
      },
      {
        "version": "16.3.8",
        "status": "affected"
      },
      {
        "version": "16.3.9",
        "status": "affected"
      },
      {
        "version": "16.3.10",
        "status": "affected"
      },
      {
        "version": "16.3.11",
        "status": "affected"
      },
      {
        "version": "16.4.1",
        "status": "affected"
      },
      {
        "version": "16.4.2",
        "status": "affected"
      },
      {
        "version": "16.4.3",
        "status": "affected"
      },
      {
        "version": "16.5.1",
        "status": "affected"
      },
      {
        "version": "16.5.1a",
        "status": "affected"
      },
      {
        "version": "16.5.1b",
        "status": "affected"
      },
      {
        "version": "16.5.2",
        "status": "affected"
      },
      {
        "version": "16.5.3",
        "status": "affected"
      },
      {
        "version": "16.6.1",
        "status": "affected"
      },
      {
        "version": "16.6.2",
        "status": "affected"
      },
      {
        "version": "16.6.3",
        "status": "affected"
      },
      {
        "version": "16.6.4",
        "status": "affected"
      },
      {
        "version": "16.6.5",
        "status": "affected"
      },
      {
        "version": "16.6.4a",
        "status": "affected"
      },
      {
        "version": "16.6.5a",
        "status": "affected"
      },
      {
        "version": "16.6.6",
        "status": "affected"
      },
      {
        "version": "16.6.7",
        "status": "affected"
      },
      {
        "version": "16.6.8",
        "status": "affected"
      },
      {
        "version": "16.6.9",
        "status": "affected"
      },
      {
        "version": "16.6.10",
        "status": "affected"
      },
      {
        "version": "16.7.1",
        "status": "affected"
      },
      {
        "version": "16.7.1a",
        "status": "affected"
      },
      {
        "version": "16.7.1b",
        "status": "affected"
      },
      {
        "version": "16.7.2",
        "status": "affected"
      },
      {
        "version": "16.7.3",
        "status": "affected"
      },
      {
        "version": "16.7.4",
        "status": "affected"
      },
      {
        "version": "16.8.1",
        "status": "affected"
      },
      {
        "version": "16.8.1a",
        "status": "affected"
      },
      {
        "version": "16.8.1b",
        "status": "affected"
      },
      {
        "version": "16.8.1s",
        "status": "affected"
      },
      {
        "version": "16.8.1c",
        "status": "affected"
      },
      {
        "version": "16.8.1d",
        "status": "affected"
      },
      {
        "version": "16.8.2",
        "status": "affected"
      },
      {
        "version": "16.8.1e",
        "status": "affected"
      },
      {
        "version": "16.8.3",
        "status": "affected"
      },
      {
        "version": "16.9.1",
        "status": "affected"
      },
      {
        "version": "16.9.2",
        "status": "affected"
      },
      {
        "version": "16.9.1a",
        "status": "affected"
      },
      {
        "version": "16.9.1b",
        "status": "affected"
      },
      {
        "version": "16.9.1s",
        "status": "affected"
      },
      {
        "version": "16.9.3",
        "status": "affected"
      },
      {
        "version": "16.9.4",
        "status": "affected"
      },
      {
        "version": "16.9.3a",
        "status": "affected"
      },
      {
        "version": "16.9.5",
        "status": "affected"
      },
      {
        "version": "16.9.5f",
        "status": "affected"
      },
      {
        "version": "16.9.6",
        "status": "affected"
      },
      {
        "version": "16.9.7",
        "status": "affected"
      },
      {
        "version": "16.9.8",
        "status": "affected"
      },
      {
        "version": "16.10.1",
        "status": "affected"
      },
      {
        "version": "16.10.1a",
        "status": "affected"
      },
      {
        "version": "16.10.1b",
        "status": "affected"
      },
      {
        "version": "16.10.1s",
        "status": "affected"
      },
      {
        "version": "16.10.1c",
        "status": "affected"
      },
      {
        "version": "16.10.1e",
        "status": "affected"
      },
      {
        "version": "16.10.1d",
        "status": "affected"
      },
      {
        "version": "16.10.2",
        "status": "affected"
      },
      {
        "version": "16.10.1f",
        "status": "affected"
      },
      {
        "version": "16.10.1g",
        "status": "affected"
      },
      {
        "version": "16.10.3",
        "status": "affected"
      },
      {
        "version": "16.11.1",
        "status": "affected"
      },
      {
        "version": "16.11.1a",
        "status": "affected"
      },
      {
        "version": "16.11.1b",
        "status": "affected"
      },
      {
        "version": "16.11.2",
        "status": "affected"
      },
      {
        "version": "16.11.1s",
        "status": "affected"
      },
      {
        "version": "16.12.1",
        "status": "affected"
      },
      {
        "version": "16.12.1s",
        "status": "affected"
      },
      {
        "version": "16.12.1a",
        "status": "affected"
      },
      {
        "version": "16.12.1c",
        "status": "affected"
      },
      {
        "version": "16.12.1w",
        "status": "affected"
      },
      {
        "version": "16.12.2",
        "status": "affected"
      },
      {
        "version": "16.12.1y",
        "status": "affected"
      },
      {
        "version": "16.12.2a",
        "status": "affected"
      },
      {
        "version": "16.12.3",
        "status": "affected"
      },
      {
        "version": "16.12.8",
        "status": "affected"
      },
      {
        "version": "16.12.2s",
        "status": "affected"
      },
      {
        "version": "16.12.1x",
        "status": "affected"
      },
      {
        "version": "16.12.1t",
        "status": "affected"
      },
      {
        "version": "16.12.4",
        "status": "affected"
      },
      {
        "version": "16.12.3s",
        "status": "affected"
      },
      {
        "version": "16.12.3a",
        "status": "affected"
      },
      {
        "version": "16.12.4a",
        "status": "affected"
      },
      {
        "version": "16.12.5",
        "status": "affected"
      },
      {
        "version": "16.12.6",
        "status": "affected"
      },
      {
        "version": "16.12.1z1",
        "status": "affected"
      },
      {
        "version": "16.12.5a",
        "status": "affected"
      },
      {
        "version": "16.12.5b",
        "status": "affected"
      },
      {
        "version": "16.12.1z2",
        "status": "affected"
      },
      {
        "version": "16.12.6a",
        "status": "affected"
      },
      {
        "version": "16.12.7",
        "status": "affected"
      },
      {
        "version": "16.12.9",
        "status": "affected"
      },
      {
        "version": "16.12.10",
        "status": "affected"
      },
      {
        "version": "17.1.1",
        "status": "affected"
      },
      {
        "version": "17.1.1a",
        "status": "affected"
      },
      {
        "version": "17.1.1s",
        "status": "affected"
      },
      {
        "version": "17.1.1t",
        "status": "affected"
      },
      {
        "version": "17.1.3",
        "status": "affected"
      },
      {
        "version": "17.2.1",
        "status": "affected"
      },
      {
        "version": "17.2.1r",
        "status": "affected"
      },
      {
        "version": "17.2.1a",
        "status": "affected"
      },
      {
        "version": "17.2.1v",
        "status": "affected"
      },
      {
        "version": "17.2.2",
        "status": "affected"
      },
      {
        "version": "17.2.3",
        "status": "affected"
      },
      {
        "version": "17.3.1",
        "status": "affected"
      },
      {
        "version": "17.3.2",
        "status": "affected"
      },
      {
        "version": "17.3.3",
        "status": "affected"
      },
      {
        "version": "17.3.1a",
        "status": "affected"
      },
      {
        "version": "17.3.1w",
        "status": "affected"
      },
      {
        "version": "17.3.2a",
        "status": "affected"
      },
      {
        "version": "17.3.1x",
        "status": "affected"
      },
      {
        "version": "17.3.1z",
        "status": "affected"
      },
      {
        "version": "17.3.4",
        "status": "affected"
      },
      {
        "version": "17.3.5",
        "status": "affected"
      },
      {
        "version": "17.3.4a",
        "status": "affected"
      },
      {
        "version": "17.3.6",
        "status": "affected"
      },
      {
        "version": "17.3.4b",
        "status": "affected"
      },
      {
        "version": "17.3.4c",
        "status": "affected"
      },
      {
        "version": "17.3.5a",
        "status": "affected"
      },
      {
        "version": "17.3.5b",
        "status": "affected"
      },
      {
        "version": "17.3.7",
        "status": "affected"
      },
      {
        "version": "17.3.8",
        "status": "affected"
      },
      {
        "version": "17.4.1",
        "status": "affected"
      },
      {
        "version": "17.4.2",
        "status": "affected"
      },
      {
        "version": "17.4.1a",
        "status": "affected"
      },
      {
        "version": "17.4.1b",
        "status": "affected"
      },
      {
        "version": "17.4.2a",
        "status": "affected"
      },
      {
        "version": "17.5.1",
        "status": "affected"
      },
      {
        "version": "17.5.1a",
        "status": "affected"
      },
      {
        "version": "17.5.1b",
        "status": "affected"
      },
      {
        "version": "17.5.1c",
        "status": "affected"
      },
      {
        "version": "17.6.1",
        "status": "affected"
      },
      {
        "version": "17.6.2",
        "status": "affected"
      },
      {
        "version": "17.6.1w",
        "status": "affected"
      },
      {
        "version": "17.6.1a",
        "status": "affected"
      },
      {
        "version": "17.6.1x",
        "status": "affected"
      },
      {
        "version": "17.6.3",
        "status": "affected"
      },
      {
        "version": "17.6.1y",
        "status": "affected"
      },
      {
        "version": "17.6.1z",
        "status": "affected"
      },
      {
        "version": "17.6.3a",
        "status": "affected"
      },
      {
        "version": "17.6.4",
        "status": "affected"
      },
      {
        "version": "17.6.1z1",
        "status": "affected"
      },
      {
        "version": "17.6.5",
        "status": "affected"
      },
      {
        "version": "17.6.6",
        "status": "affected"
      },
      {
        "version": "17.7.1",
        "status": "affected"
      },
      {
        "version": "17.7.1a",
        "status": "affected"
      },
      {
        "version": "17.7.1b",
        "status": "affected"
      },
      {
        "version": "17.7.2",
        "status": "affected"
      },
      {
        "version": "17.10.1",
        "status": "affected"
      },
      {
        "version": "17.10.1a",
        "status": "affected"
      },
      {
        "version": "17.10.1b",
        "status": "affected"
      },
      {
        "version": "17.8.1",
        "status": "affected"
      },
      {
        "version": "17.8.1a",
        "status": "affected"
      },
      {
        "version": "17.9.1",
        "status": "affected"
      },
      {
        "version": "17.9.1w",
        "status": "affected"
      },
      {
        "version": "17.9.2",
        "status": "affected"
      },
      {
        "version": "17.9.1a",
        "status": "affected"
      },
      {
        "version": "17.9.1x",
        "status": "affected"
      },
      {
        "version": "17.9.1y",
        "status": "affected"
      },
      {
        "version": "17.9.3",
        "status": "affected"
      },
      {
        "version": "17.9.2a",
        "status": "affected"
      },
      {
        "version": "17.9.1x1",
        "status": "affected"
      },
      {
        "version": "17.9.3a",
        "status": "affected"
      },
      {
        "version": "17.9.4",
        "status": "affected"
      },
      {
        "version": "17.9.1y1",
        "status": "affected"
      },
      {
        "version": "17.11.1",
        "status": "affected"
      },
      {
        "version": "17.11.1a",
        "status": "affected"
      },
      {
        "version": "17.12.1",
        "status": "affected"
      },
      {
        "version": "17.12.1a",
        "status": "affected"
      },
      {
        "version": "17.11.99SW",
        "status": "affected"
      }
    ]
  }
]

Social References

More

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.036 Low

EPSS

Percentile

91.8%