Command Injection in Cisco Systems, Inc products - CVE-2023-20097

Vulnerability identifier: #VU73973

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-20097

CWE-ID: CWE-77

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary commands on the target system.

The vulnerability exists due to improper input validation in Cisco access points (AP) software. A local administrator can pass specially crafted data to the application and execute arbitrary commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

6300 Series Embedded Services Access Points
Catalyst IW6300 Heavy Duty Series Access Points
Aironet 4800 Access Points
Wireless LAN Controller Software
Integrated AP on 1100 Integrated Services Routers
Catalyst IW9167 Heavy Duty Series
Catalyst IW9165 Rugged Series
Catalyst IW9165 Heavy Duty Series
Catalyst 9100 Access Points
Aironet 3800 Series Access Points
Aironet 2800 Series Access Points
Aironet 1800 Series Access Points
Aironet 1560 Series Access Points
Cisco Aironet 1540 Series Access Points
Cisco IOS XE

Install updates from vendor's website.

Wireless LAN Controller Software - update to 8.10.181.0
Cisco IOS XE - addressed in versions 16.12.8, 17.3.6, 17.6.5, 17.9.2

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironetap-cmdinj-6bjT4FL8

• Command Injection in Cisco Access Point Software