6.0
Moyenne
CVE-2023-20210 A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root…
Description
A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco BroadWorks | 24.0 | Pas de correctif indiqué |
| Cisco BroadWorks | 23.0 | Pas de correctif indiqué |
| Cisco BroadWorks | 22.0 | Pas de correctif indiqué |
| Cisco BroadWorks | 21.0 | Pas de correctif indiqué |
| Cisco BroadWorks 21 | 21.sp1 → 21.sp9 | Pas de correctif indiqué |
Références
- cisco-sa-bw-privesc-yw4ekrXW sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco BroadWorks
Les 21 CVE de Cisco BroadWorks →
CVE-2026-76438
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow…
6.5
Moyenne
CVE-2026-20320
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote…
7.5
Élevée
CVE-2025-20307
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow…
4.8
Moyenne
CVE-2025-20211
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an…
6.1
Moyenne