PT-2023-2208 · Cisco · Cisco Secure Network Analytics

Published 2023-04-05 · Updated 2023-04-12 · CVE-2023-20103

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:S/C:P/I:C/A:P

Name of the Vulnerable Software and Affected Versions Cisco Secure Network Analytics (affected versions not specified)

Description A vulnerability in the web interface of Cisco Secure Network Analytics is due to insufficient validation of user input. This could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device by uploading a crafted file. A successful exploit could allow the attacker to execute code on the affected device. The attacker would need to have valid Administrator credentials on the affected device to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-20

CWE-94

Related Identifiers

BDU:2023-01955

CVE-2023-20103

Affected Products

Cisco Secure Network Analytics

References · 6

• https://osv.dev/vulnerability/CVE-2023-20103 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01955 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-stealth-rce-BDwXFK9C · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20103 · Security Note
• https://t.me/cvenotify/47632 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2023040632 · Note