CVE-2023-20182

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*

History

26 May 2023, 02:53

Type Values Removed Values Added
References (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-multiple-kTQkGU3 - (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-multiple-kTQkGU3 - Vendor Advisory
First Time Cisco dna Center
Cisco
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*
CWE CWE-20

18 May 2023, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-05-18 03:15

Updated : 2023-12-10 15:01


NVD link : CVE-2023-20182

Mitre link : CVE-2023-20182

CVE.ORG link : CVE-2023-20182


JSON object : View

Products Affected

cisco

  • dna_center
CWE
CWE-20

Improper Input Validation

CWE-285

Improper Authorization