Permissions, Privileges, and Access Controls in Cisco Systems, Inc products - CVE-2023-20210

Vulnerability identifier: #VU78014

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-20210

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
BroadWorks Application Server
BroadWorks Database Server
BroadWorks Execution Server
BroadWorks Messaging Server
BroadWorks Network Database Server
BroadWorks Network Function Manager
BroadWorks Network Server
BroadWorks Profile Server
BroadWorks Sharing Server
BroadWorks Video Server
BroadWorks WebRTC Server
BroadWorks Xtended Services Platform
BroadWorks Application Delivery Platform
BroadWorks Database Troubleshooting Server
BroadWorks Media Server
BroadWorks Service Control Function Server

Software vendor:
Cisco Systems, Inc

The vulnerability allows a local administrator to escalate privileges on the system.

The vulnerability exists due to insufficient input validation by the operating system CLI, which leads to security restrictions bypass and privilege escalation.

Install updates from vendor's website.

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-privesc-yw4ekrXW