CVE-2023-20115 Missing authorization in Cisco NX-OS Software
Authenticated non-admin users can read or overwrite OS files on Cisco Nexus switches due to improper role verification in the SFTP server.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-20115?
CVE-2023-20115 is a medium-severity missing authorization vulnerability in Cisco Nx-Os, published on 23 Aug 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected device. This vulnerability is due to a logic error when verifying the user role when an SFTP connection is opened to an affected device. An attacker could exploit this vulnerability by connecting and authenticating via SFTP as a valid, non-administrator user. A successful exploit could allow the attacker to read or overwrite files from the underlying operating system with the privileges of the authenticated user. There are workarounds that address this vulnerability.
Weakness: CWE-671
Which versions are affected by CVE-2023-20115?
It affects 1 product.
Products include Cisco Nx-Os.
How do I fix CVE-2023-20115?
No fix has been published for CVE-2023-20115 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-20115 being exploited?
There is no known exploitation of CVE-2023-20115 in the wild and no public exploit code.
Other vulnerabilities in Cisco Nx-Os
Sources
Also known as GHSA-x4px-54q2-j29c.