CVE-2023-20127
published 2023-04-05CVE-2023-20127: Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow…
PriorityP431medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.92%
56.0th percentile
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_prime_infrastructure | — | — |
| cisco | prime_infrastructure | <= 3.7 | — |
| cisco | prime_infrastructure | — | — |
| cisco | prime_infrastructure | — | — |
| cisco | prime_infrastructure | — | — |
| cisco | prime_infrastructure | — | — |
| cisco | prime_infrastructure | >= 3.10 < 3.10.2 | 3.10.2 |
| cisco | prime_infrastructure_and_cisco_evolved_programmable_network_manager | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
vendor_cisco6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jcfr-mrq7-pg9v: Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) cou
ghsa_unreviewed·2023-04-05
CVE-2023-20127 [MEDIUM] GHSA-jcfr-mrq7-pg9v: Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) cou
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.
For more information about these vulnerabilities, see the Details section of this advisory.
Cisco
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities
vendor_cisco·2023-04-05·CVSS 6.5
CVE-2023-20127 [MEDIUM] CWE-27 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.
For more information about these vulnerabilities, see the Details section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-infodis-eRPWAXLe
Cisco
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2023-20127 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities
CVE-2023-20127: Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the
CVSS: 3.1
CWE: CWE-27, CWE-317, CWE-352, CWE-27, CWE-317, CWE-352, CWE-80, CWE-27, CWE-317, CWE-352, CWE-27, CWE-317, CWE-352, CWE-80
Bug IDs: CSCwc25461, CSCwc51948, CSCwc76734, CSCwc25461, CSCwc51948
No detection rules found.
No public exploits indexed.
Threat Intel
UAT-8616
threat_intel·CVSS 7.8
CVE-2026-20127 [HIGH] UAT-8616
# Threat Actor: UAT-8616
## Description
UAT-8616 is a highly sophisticated cyber threat actor attributed by Cisco Talos, with evidence of activity dating back to at least 2023. They have been observed exploiting CVE-2026-20127 in the wild and previously exploited CVE-2022-20775 by escalating to root user access through a software version downgrade. Their operations indicate a focus on targeting network edge devices to establish persistent footholds in high-value organizations, including Critical Infrastructure sectors.
2023-04-05
Published