CVE-2023-20182

2023-05-1803:15:11

CWE-20

CWE-285

[email protected]

web.nvd.nist.gov

cisco

dna center

software

api

vulnerabilities

cve-2023-20182

nvd

security

advisory

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

JSON

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

NVD

Node

ciscodna_centerRange<2.3.3.7

ciscodna_centerRange2.3.4–2.3.5.3

CPENameOperatorVersion
cisco:dna_centercisco dna centerlt2.3.3.7
cisco:dna_centercisco dna centerlt2.3.5.3

CPE	Name	Operator	Version
cisco:dna_center	cisco dna center	lt	2.3.3.7
cisco:dna_center	cisco dna center	lt	2.3.5.3

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Digital Network Architecture Center (DNA Center) ",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]