CVE-2023-20097
published 2023-03-23CVE-2023-20097: A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root…
PriorityP434medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.24%
14.5th percentile
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | access_point | — | — |
| cisco | aironet_access_point_software | < 17.9.0.135 | 17.9.0.135 |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | ios_xe | < 16.12.8 | 16.12.8 |
| cisco | ios_xe | >= 17.1 < 17.3.6 | 17.3.6 |
| cisco | ios_xe | >= 17.4 < 17.6.5 | 17.6.5 |
| cisco | ios_xe | >= 17.7 < 17.9.2 | 17.9.2 |
| cisco | wireless_lan_controller_software | < 8.10.183.0 | 8.10.183.0 |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_cisco4.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Access Point Software Command Injection Vulnerability
vendor_cisco·2023-03-22·CVSS 4.6
CVE-2023-20097 [MEDIUM] CWE-77 Cisco Access Point Software Command Injection Vulnerability
Cisco Access Point Software Command Injection Vulnerability
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges.
This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/c
Cisco
Cisco Access Point Software Command Injection Vulnerability
vendor_cisco·CVSS 3.1
CVE-2023-20097 Cisco Access Point Software Command Injection Vulnerability
CVE-2023-20097: Cisco Access Point Software Command Injection Vulnerability
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP. Cisco has released software updates that address this vulnerability. There are no
CVSS: 3.1
CWE: CWE-77, CWE-77
Bug IDs: CSCwc70131
GHSA
GHSA-59p2-366r-gx84: A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with r
ghsa_unreviewed·2023-03-23
CVE-2023-20097 [MEDIUM] CWE-77 GHSA-59p2-366r-gx84: A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with r
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-23
Published