PT-2023-2386 · Cisco · Cisco Industrial Network Director

Published 2023-04-19 · Updated 2025-08-11 · CVE-2023-20036

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director (affected versions not specified)

Description The issue exists due to improper input validation when uploading a Device Pack, allowing an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. An attacker could exploit this by altering the request sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.

Recommendations For all affected versions, update to the latest software version released by Cisco that addresses this issue. As a temporary workaround, consider restricting access to the Device Pack upload feature until a patch is available. Avoid altering requests when uploading a Device Pack to minimize the risk of exploitation.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-02168

CVE-2023-20036

Affected Products

Cisco Industrial Network Director

References · 10

• https://bdu.fstec.ru/vul/2023-02168 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-CAeLFk6V · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20036 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20036 · Vendor Advisory
• https://t.me/true_secator/4310 · Telegram Post
• https://t.me/cveNotify/131701 · Telegram Post
• https://twitter.com/CveFindCom/status/1857446259176399341 · Twitter Post
• https://twitter.com/CVEnew/status/1857448664194523408 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1857558518976389300 · Twitter Post
• https://t.me/pentestingnews/35192 · Telegram Post