CVE-2023-20017 Command injection in Cisco Intersight Virtual Appliance
Authenticated administrators can execute arbitrary root commands via crafted software package uploads due to insufficient input validation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-20017?
CVE-2023-20017 is a medium-severity command injection vulnerability in Cisco Intersight Virtual Appliance, published on 16 Aug 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities. These vulnerabilities are due to insufficient input validation when extracting uploaded software packages. An attacker could exploit these vulnerabilities by authenticating to an affected device and uploading a crafted software package. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.
Which versions are affected by CVE-2023-20017?
It affects 1 product.
Products include Cisco Intersight Private Virtual Appliance.
How do I fix CVE-2023-20017?
No fix has been published for CVE-2023-20017 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2023-20017 being exploited?
There is no known exploitation of CVE-2023-20017 in the wild and no public exploit code.
Other vulnerabilities in Cisco Intersight Virtual Appliance
Sources
Also known as GHSA-4hvg-697f-23pr.