CVEvulnerability

CVE-2023-20260

6.7 MEDIUM Published 2024-01-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-01-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284, CWE-88

Description

A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper processing of command line arguments to application scripts. An attacker could exploit this vulnerability by issuing a command on the CLI with malicious options. A successful exploit could allow the attacker to gain the escalated privileges of the root user on the underlying operating system.

Affected configurations

• cisco evolved programmable network manager (< 7.1.1) • cisco prime infrastructure (< 3.10.4) • cisco prime infrastructure 3.10.4

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-88 Improper Neutralization of Argument Delimiters in a Command weakness

References