A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.
This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
25 Jan 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-552 |
16 Oct 2023, 18:07
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-269 | |
| References | (MISC) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn - Vendor Advisory | |
| First Time |
Cisco ess-3300-con-e
Cisco catalyst Ie3400 Rugged Switch Cisco ess-3300-24t-ncp-e Cisco catalyst Ir1835-k9 Cisco ess-3300-24t-con-e Cisco ios Xe Cisco catalyst Ir8140h-k9 Cisco catalyst Ir8340-k9 Cisco ess-3300-con-a Cisco ess-3300-24t-con-a Cisco catalyst Ir1821-k9 Cisco catalyst Ie3200 Rugged Switch Cisco ess-3300-ncp-e Cisco catalyst Ir8140h-p-k9 Cisco ess-3300-24t-ncp-a Cisco Cisco catalyst Ir1831-k9 Cisco catalyst Ir1833-k9 Cisco catalyst Ie3300 Rugged Switch Cisco catalyst Ir1101 Cisco ess-3300-ncp-a |
|
| CPE | cpe:2.3:h:cisco:catalyst_ir1833-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1831-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1821-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8140h-p-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8140h-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-con-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8340-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1101:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-con-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-con-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-ncp-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-ncp-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-ncp-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-con-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-ncp-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1835-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:* |
04 Oct 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-04 17:15
Updated : 2024-01-25 17:15
NVD link : CVE-2023-20235
Mitre link : CVE-2023-20235
CVE.ORG link : CVE-2023-20235
JSON object : View
Products Affected
cisco
- ess-3300-24t-con-a
- catalyst_ir1831-k9
- ios_xe
- catalyst_ir1833-k9
- ess-3300-con-a
- catalyst_ir1101
- catalyst_ir8340-k9
- ess-3300-24t-ncp-a
- ess-3300-ncp-a
- catalyst_ie3400_rugged_switch
- ess-3300-con-e
- catalyst_ir8140h-p-k9
- catalyst_ie3300_rugged_switch
- catalyst_ir1835-k9
- ess-3300-ncp-e
- catalyst_ir1821-k9
- catalyst_ir8140h-k9
- ess-3300-24t-con-e
- catalyst_ie3200_rugged_switch
- ess-3300-24t-ncp-e