CVE-2023-20216
published 2023-08-03CVE-2023-20216: A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate…
PriorityP344high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
4.4th percentile
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system.
This vulnerability is due to incorrect implementation of user role permissions. An attacker could exploit this vulnerability by authenticating to the application as a user with the BWORKS or BWSUPERADMIN role and issuing crafted commands on an affected system. A successful exploit could allow the attacker to execute commands beyond the sphere of their intended access level, including initiating installs or running operating system commands with elevated permissions.
There are workarounds that address this vulnerability.
Affected
3236 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | broadworks | — | — |
| cisco | broadworks_application_delivery_platform | < ri.2023.05 | ri.2023.05 |
| cisco | broadworks_application_server | < 23.0.2023.05 | 23.0.2023.05 |
| cisco | broadworks_application_server | < 2023.05 | 2023.05 |
| cisco | broadworks_application_server | >= 24.0 < 24.0.2023.05 | 24.0.2023.05 |
| cisco | broadworks_database_server | < 2023.05 | 2023.05 |
| cisco | broadworks_execution_server | < 2023.05 | 2023.05 |
| cisco | broadworks_media_server | < 2023.05 | 2023.05 |
| cisco | broadworks_network_database_server | < 2023.05 | 2023.05 |
| cisco | broadworks_network_function_manager | < 2023.05 | 2023.05 |
| cisco | broadworks_network_server | < 23.0.2023.05 | 23.0.2023.05 |
| cisco | broadworks_network_server | < 2023.05 | 2023.05 |
| cisco | broadworks_profile_server | < 23.0.2023.05 | 23.0.2023.05 |
| cisco | broadworks_profile_server | < 2023.05 | 2023.05 |
| cisco | broadworks_service_control_function_server | < 2023.05 | 2023.05 |
| cisco | broadworks_troubleshooting_server | < 2023.06 | 2023.06 |
| cisco | broadworks_xtended_services_platform | < 23.0.2023.05 | 23.0.2023.05 |
| cisco | broadworks_xtended_services_platform | < 2023.05 | 2023.05 |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_cisco4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco BroadWorks Privilege Escalation Vulnerability
vendor_cisco·2023-07-19·CVSS 4.4
CVE-2023-20216 [MEDIUM] CWE-269 Cisco BroadWorks Privilege Escalation Vulnerability
Cisco BroadWorks Privilege Escalation Vulnerability
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system.
This vulnerability is due to incorrect implementation of user role permissions. An attacker could exploit this vulnerability by authenticating to the application as a user with the BWORKS or BWSUPERADMIN role and issuing crafted commands on an affected system. A successful exploit could allow the attacker to execute commands beyond the sphere of their intended access level, including initiating installs or running operating system commands with elevated permissions.
Cisco has released software updates that address this vulnerability. There are wor
Cisco
Cisco BroadWorks Privilege Escalation Vulnerability
vendor_cisco·CVSS 3.1
CVE-2023-20216 Cisco BroadWorks Privilege Escalation Vulnerability
CVE-2023-20216: Cisco BroadWorks Privilege Escalation Vulnerability
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role permissions. An attacker could exploit this vulnerability by authenticating to the application as a user with the BWORKS or BWSUPERADMIN role and issuing crafted commands on an affected system. A successful exploit could allow the attacker to execute commands beyond the sphere of their intended access level, including initiating installs or running operating system commands with elevated permissions. Cisco has released software updates that address this vulnerability.
GHSA
GHSA-cqj5-c26p-jcv4: A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate
ghsa_unreviewed·2023-08-04
CVE-2023-20216 [HIGH] CWE-269 GHSA-cqj5-c26p-jcv4: A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system.
This vulnerability is due to incorrect implementation of user role permissions. An attacker could exploit this vulnerability by authenticating to the application as a user with the BWORKS or BWSUPERADMIN role and issuing crafted commands on an affected system. A successful exploit could allow the attacker to execute commands beyond the sphere of their intended access level, including initiating installs or running operating system commands with elevated permissions.
There are workarounds that address this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-08-03
Published