Permissions, Privileges, and Access Controls in Cisco IOS XE - CVE-2023-20065
Published: March 23, 2023
Vulnerability identifier: #VU73989
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2023-20065
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Cisco Systems, Inc
Affected software:
Cisco IOS XE
Cisco IOS XE
Detailed vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient restrictions on the hosted application, which leads to security restrictions bypass and privilege escalation.
How to mitigate CVE-2023-20065
Install updates from vendor's website.