CVE-2023-20040
Cisco Cisco Network Services Orchestrator
En bref
- Source
- NVD
- EPSS
- EPSS 1.24 % · centile 69 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- cisco
- Statut NVD
- Modified
Description
A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of service (DoS) on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of the admin group. This vulnerability exists because user-supplied input is not properly validated when NETCONF is used to upload packages to an affected device. An attacker could exploit this vulnerability by uploading a specially crafted package file. A successful exploit could allow the attacker to write crafted files to arbitrary locations on the filesystem or delete arbitrary files from the filesystem of an affected device, resulting in a DoS condition. Note: By default, during install, Cisco NSO will be set up to run as the root user unless the --run-as-user option is used.
Faiblesses (CWE)
- CWE-23 — Relative Path Traversal
- CWE-434 — Téléversement sans restriction d'un fichier de type dangereux
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H | cisco |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H | NVD · psirt@cisco.com (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-24219
- GCVE · GCVE-0-2023-20040
Configurations affectées (CPE NVD)
cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*≥ 3.3 < 5.4.7cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*≥ 5.5 < 5.5.6cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*≥ 5.6 < 5.6.7cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*≥ 5.7 < 5.7.4cpe:2.3:a:cisco:network_services_orchestrator:5.8:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Cisco · Cisco Network Services Orchestrator | affected 4.7.3 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |