CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

CVE-2023-20044

Cisco CX Cloud Agent contains a privilege-escalation vulnerability caused by insecure file permissions. An authenticated, local attacker could exploit settings persuaded by support to call insecure scripts, potentially taking full control of the affected device. Cisco has issued advisories and so...