CVE-2023-20102
Cisco Secure Network Analytics Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to insufficient sanitization of user-provided data that is parsed into system memory. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the administrator user.
| CWE | CWE-502 |
| Vendor | cisco |
| Product | cisco secure network analytics |
| Ecosystems | |
| Industries | NetworkingTelecommunications |
| Published | Apr 5, 2023 |
| Last Updated | Oct 28, 2024 |
Stay Ahead of the Next One
Get instant alerts for cisco cisco secure network analytics
Be the first to know when new high vulnerabilities affecting cisco cisco secure network analytics are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Cisco / Cisco Secure Network Analytics
n/a