CVE-2023-20185
published 2023-07-12CVE-2023-20185: A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated…
PriorityP348high7.4CVSS 3.1
AVNACHPRNUINSUCHIHAN
EPSS
0.35%
27.1th percentile
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic.
This vulnerability is due to an issue with the implementation of the ciphers that are used by the CloudSec encryption feature on affected switches. An attacker with an on-path position between the ACI sites could exploit this vulnerability by intercepting intersite encrypted traffic and using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to read or modify the traffic that is transmitted between the sites.
Cisco has not released and will not release software updates that address this vulnerability.
Affected
161 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | aci_multi-site_cloudsec_encryption | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
| cisco | cisco_nx-os_system_software_in_aci_mode | — | — |
CVSS provenance
nvdv3.17.4HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
vendor_cisco7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
vendor_cisco·2023-07-05·CVSS 7.4
CVE-2023-20185 [HIGH] CWE-330 Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic.
This vulnerability is due to an issue with the implementation of the ciphers that are used by the CloudSec encryption feature on affected switches. An attacker with an on-path position between the ACI sites could exploit this vulnerability by intercepting intersite encrypted traffic and using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to read or modify the traffic that is transmitted between the sites.
Cisco has not released and will not rel
Cisco
Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
vendor_cisco·CVSS 3.1
CVE-2023-20185 Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
CVE-2023-20185: Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue with the implementation of the ciphers that are used by the CloudSec encryption feature on affected switches. An attacker with an on-path position between the ACI sites could exploit this vulnerability by intercepting intersite encrypted traffic and using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to read or modify the traffic that is transmitted between the sites. Cisco has not released an
GHSA
GHSA-jpfv-6q3x-wx9f: A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthen
ghsa_unreviewed·2023-07-12
CVE-2023-20185 [HIGH] CWE-326 GHSA-jpfv-6q3x-wx9f: A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthen
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic.
This vulnerability is due to an issue with the implementation of the ciphers that are used by the CloudSec encryption feature on affected switches. An attacker with an on-path position between the ACI sites could exploit this vulnerability by intercepting intersite encrypted traffic and using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to read or modify the traffic that is transmitted between the sites.
Cisco has not released and will not release software updates that address this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-07-12
Published