Medium severity · published Jul 12, 2023
CVE-2023-20210
A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device
6.0
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device.
The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Cisco BroadWorks · Cisco
24.0 ap375672; 24.0 ap375655; 24.0 ap376979; 24.0 ap379112; 24.0 ap379588; 24.0 ap378485; +34 more · source: vendor
BA
Broadworks Application Delivery Platform Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BA
Broadworks Application Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BD
Broadworks Database Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BD
Broadworks Database Troubleshooting Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BE
Broadworks Execution Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BM
Broadworks Media Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BM
Broadworks Messaging Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BN
Broadworks Network Database Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BN
Broadworks Network Function Manager Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BN
Broadworks Network Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
BP
Broadworks Profile Server Firmware · Cisco
23.0; 24.0; 25.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20210
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20210
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-privesc-yw4ekrXW
More from Cisco BroadWorks
9.8
CVE-2023-20238
A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an…
8.8
CVE-2022-20958
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request…
8.6
CVE-2023-20125
Cisco BroadWorks Network Server TCP Denial of Service Vulnerability
8.6
CVE-2023-20020
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an…
7.8
CVE-2023-20216
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an…
