Lucene search

[email protected]NVD:CVE-2023-20046

HistoryMay 09, 2023 - 6:15 p.m.

CVE-2023-20046

2023-05-0918:15:11

CWE-289

CWE-522

[email protected]

web.nvd.nist.gov

cisco staros

ssh authentication

remote attacker

privilege escalation

vulnerability

user credentials

workarounds

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

47.6%

JSON

A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device.

This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user.

There are workarounds that address this vulnerability.

Affected configurations

Nvd

Node

ciscostarosRange<21.22.14

ciscostarosRange21.23.0–21.23.31

ciscostarosRange21.25.0–21.25.15

ciscostarosRange21.26.0–21.26.17

ciscostarosRange21.27.0–21.27.6

ciscostarosRange21.28.0–21.28.3

ciscostarosMatch21.23.n

ciscostarosMatch21.24

ciscostarosMatch21.27.m

ciscostarosMatch21.28.m

AND

ciscoasr_5000Match-

ciscoasr_5500Match-

ciscoasr_5700Match-

ciscovpc-diMatch-

ciscovpc-siMatch-

VendorProductVersionCPE
ciscostaros*cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*
ciscostaros21.23.ncpe:2.3:o:cisco:staros:21.23.n:*:*:*:*:*:*:*
ciscostaros21.24cpe:2.3:o:cisco:staros:21.24:*:*:*:*:*:*:*
ciscostaros21.27.mcpe:2.3:o:cisco:staros:21.27.m:*:*:*:*:*:*:*
ciscostaros21.28.mcpe:2.3:o:cisco:staros:21.28.m:*:*:*:*:*:*:*
ciscoasr_5000-cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*
ciscoasr_5500-cpe:2.3:h:cisco:asr_5500:-:*:*:*:*:*:*:*
ciscoasr_5700-cpe:2.3:h:cisco:asr_5700:-:*:*:*:*:*:*:*
ciscovpc-di-cpe:2.3:h:cisco:vpc-di:-:*:*:*:*:*:*:*
ciscovpc-si-cpe:2.3:h:cisco:vpc-si:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	staros	*	cpe:2.3:o:cisco:staros::::::::
cisco	staros	21.23.n	cpe:2.3:o:cisco:staros:21.23.n:::::::*
cisco	staros	21.24	cpe:2.3:o:cisco:staros:21.24:::::::*
cisco	staros	21.27.m	cpe:2.3:o:cisco:staros:21.27.m:::::::*
cisco	staros	21.28.m	cpe:2.3:o:cisco:staros:21.28.m:::::::*
cisco	asr_5000	-	cpe:2.3:h:cisco:asr_5000:-:::::::*
cisco	asr_5500	-	cpe:2.3:h:cisco:asr_5500:-:::::::*
cisco	asr_5700	-	cpe:2.3:h:cisco:asr_5700:-:::::::*
cisco	vpc-di	-	cpe:2.3:h:cisco:vpc-di:-:::::::*
cisco	vpc-si	-	cpe:2.3:h:cisco:vpc-si:-:::::::*