CVE-2023-20065

At a glance

Severity: HIGH 7.8
EPSS: EPSS 0.44 % · percentile 38 (2026-10-28)
State: PUBLISHED
Published: 2023-03-23
Updated: 2024-08-02
Assigner: cisco
NVD status: Modified

Description

A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient restrictions on the hosted application. An attacker could exploit this vulnerability by logging in to and then escaping the Cisco IOx application container. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.

Scores

Version	Score	Vector	Scored by
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	cisco
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	NVD · psirt@cisco.com (Secondary)
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

CWE-284

European references

ENISA EUVD · EUVD-2023-24244
GCVE · GCVE-0-2023-20065

CERT-FR advisories

CERTFR-2023-AVI-0256 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*

Affected products

Product	Versions
Cisco · Cisco IOS XE Software	affected 16.4.1 ; affected 16.4.2 ; affected 16.4.3 ; affected 17.3.1 ; affected 17.3.2 ; affected 17.3.3

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-priv-escalate-Xg8zkyPk

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD