CVE-2023-20174

Cisco ISE CVE-2023-20174 refers to multiple vulnerabilities in the web-based management interface, stemming from XML External Entity Injection. When authenticated as an administrator, an attacker could read arbitrary files or perform SSRF via the affected device. The root cause is XML handling in...

CVE-2023-20164

CVE-2023-20164 affects Cisco Identity Services Engine (ISE). The vulnerability is a command injection in ISE that could allow an authenticated attacker (with valid credentials on an affected device) to execute commands on the underlying OS and potentially gain root privileges. Exploitation detail...

CVE-2023-20171

Cisco Identity Services Engine (ISE) is affected by CVE-2023-20171: authenticated, credentialed attackers can delete or read arbitrary files on the OS. Affected versions include Cisco ISE 3.1.x before 3.1P6 and 3.2.x before 3.2P2. Cisco and third-party advisories (e.g., Cisco security advisory ci...

CVE-2023-20106

Cisco Identity Services Engine (ISE) contains authenticated-file-delete/read vulnerabilities (CVE-2023-20106) that allow an attacker with valid credentials to delete or read arbitrary OS files. Affected lines point to ISE releases prior to 3.1P6 (3.1.x) and prior to 3.2P2 (3.2.x). The Cisco advis...

CVE-2023-20173

Cisco Identity Services Engine (ISE) is affected by CVE-2023-20173, an XML External Entity Injection vulnerability in the web-based management interface that can allow an authenticated, remote attacker with valid Administrator credentials to read arbitrary files or perform SSRF. The exploitation ...

CVE-2023-20087 Cisco Identity Services Engine Arbitrary File Download Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insufficient input validation. An attacker cou...

CVE-2023-20163

CVE-2023-20163 concerns Cisco Identity Services Engine (ISE) command injection vulnerabilities. The affected product is ISE; the underlying issue enables an authenticated attacker with valid credentials to perform command injections on the OS and elevate to root. Exploitation context and impact a...

CVE-2023-20077 Cisco Identity Services Engine Arbitrary File Download Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insufficient input validation. An attacker cou...

CVE-2023-20166

Cisco Identity Services Engine (ISE) contains path traversal vulnerabilities (CVE-2023-20166) that could allow an authenticated administrator to escape restricted contexts, elevate privileges to root, or read arbitrary files on the underlying OS. The root cause is path traversal handling within I...

CVE-2023-20167

Cisco Identity Services Engine (ISE) contains path traversal vulnerabilities that could let an authenticated Administrator read arbitrary files on the underlying OS or escalate to root. The issue affects ISE’s web management interface and is caused by improper validation of user-supplied input, r...

Cisco Identity Services Engine Path Traversal Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid...

Cisco Identity Services Engine XML External Entity Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery SSRF attack through an affected device. To exploit these vulnerabilities, an attacker...

Cisco Identity Services Engine Arbitrary File Download Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insufficient input validation. An attacker cou...

Multiple Command Injection Vulnerabilities Found in Cisco EPNM, ISE, and Prime Infrastructure

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary An attacker with authenticated, local access can exploit these vulnerabilities to escape the restricted shell and gain root privileges on the operating system. To receive real-time threat...

CVE-2023-20121

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager EPNM, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating...

CVE-2023-20121

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager EPNM, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating...

CVE-2023-20122

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager EPNM, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating...

Design/Logic Flaw

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager EPNM, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating...

Design/Logic Flaw

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager EPNM, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating...

CVE-2023-20022

Multiple vulnerabilities in specific Cisco Identity Services Engine ISE CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid...