PT-2023-2266 · Cisco · Cisco Access Points

Matthew Street · Published 2023-03-22 · Updated 2023-04-05 · CVE-2023-20097

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco access points (AP) software (affected versions not specified)

Description A vulnerability in Cisco access points software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This issue is due to improper input validation of commands issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this by issuing a command with crafted arguments, potentially gaining full root access on the AP.

Recommendations For all affected versions, consider restricting access to the CLI of the controller to minimize the risk of exploitation. As a temporary workaround, limiting the ability to issue commands with crafted arguments from the wireless controller to the AP could help mitigate the risk until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2023-02025

CVE-2023-20097

Affected Products

Cisco Access Points

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironetap-cmdinj-6bjT4FL8 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02025 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20097 · Security Note
• https://t.me/cibsecurity/60590 · Telegram Post