CVE-2023-20097

Cisco Access Point Software Command Injection Vulnerability

Published Mar 23, 2023 CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-24276 A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Cisco Aironet 1540 Aironet 1542d Aironet 1542i Aironet 1560 Aironet 1562d Aironet 1562e Aironet 1562i Aironet 1800 Aironet 1800i Aironet 1810 Aironet 1810w Aironet 1815 Aironet 1815i Aironet 1815m Aironet 1815t Aironet 1815w Aironet 2800 Aironet 2800e Aironet 2800i Aironet 3800 Aironet 3800e Aironet 3800i Aironet 3800p Aironet 4800 Aironet Access Point Software Catalyst 9100 Catalyst 9105 Catalyst 9105ax Catalyst 9105axi Catalyst 9105axw Catalyst 9115 Catalyst 9115 Ap Catalyst 9115ax Catalyst 9115axe Catalyst 9115axi Catalyst 9117 Catalyst 9117 Ap Catalyst 9117ax Catalyst 9117axi Catalyst 9120 Catalyst 9120 Ap Catalyst 9120ax Catalyst 9120axe Catalyst 9120axi Catalyst 9120axp Catalyst 9124 Catalyst 9124ax Catalyst 9124axd Catalyst 9124axi Catalyst 9130 Catalyst 9130 Ap Catalyst 9130ax Catalyst 9130axe Catalyst 9130axi Catalyst Iw6300 Catalyst Iw6300 Ac Catalyst Iw6300 Dc Catalyst Iw6300 Dcw Esw6300 Ios Xe Wireless Lan Controller Software
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Oct 25, 2024, 4:02 PM
Reserved
Oct 27, 2022, 12:00 AM
Status
Modified
Published
Mar 23, 2023, 5:15 PM
Modified
Jun 17, 2026, 5:29 AM