PT-2023-2222 · Cisco · Cisco Ios Xe

X.B · Published 2023-03-22 · Updated 2023-09-27 · CVE-2023-20082

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches versions prior to 16.11.1

Description A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This issue arises from errors in retrieving the public release key used for image signature verification. An attacker could exploit this by modifying specific variables in the Serial Peripheral Interface (SPI) flash memory of an affected device, potentially allowing the execution of persistent code on the underlying operating system.

Recommendations For versions prior to 16.11.1, consider updating to Cisco IOS XE Software release 16.11.1 or later to increase the complexity of an attack using this vulnerability. As a temporary workaround, restrict access to the device to prevent attackers from downgrading the software to a version with lower attack complexity. Additionally, limit privileges to prevent attackers with level-15 privileges from easily downgrading the Cisco IOS XE Software.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-01972

CVE-2023-20082

Affected Products

Cisco Ios Xe

References · 5

• https://osv.dev/vulnerability/CVE-2023-20082 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9300-spi-ace-yejYgnNQ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20082 · Security Note
• https://bdu.fstec.ru/vul/2023-01972 · Security Note
• https://twitter.com/matrosov/status/1707173906182963482 · Twitter Post