Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvk | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Apr 2023, 02:24
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cisco prime Infrastructure
Cisco Cisco evolved Programmable Network Manager Cisco identity Services Engine |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
| CPE | cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:* |
|
| References | (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvk - Vendor Advisory | |
| CWE | CWE-78 |
05 Apr 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-05 19:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-20121
Mitre link : CVE-2023-20121
CVE.ORG link : CVE-2023-20121
JSON object : View
Products Affected
cisco
- identity_services_engine
- prime_infrastructure
- evolved_programmable_network_manager