CVE detail

CVE-2023-20260 — CVE-2023-20260

Published 2024-01-17 · Modified 2026-06-17 · Vendor cisco · Product evolved_programmable_network_manager · Source nvd
MEDIUM
severity
CVSS-derived band
6.0
CVSS v3
0–10 scale
0.0018
EPSS probability
exploitation probability, 30d
7.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog

Description

A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper processing of command line arguments to application scripts. An attacker could exploit this vulnerability by issuing a command on the CLI with malicious options. A successful exploit could allow the attacker to gain the escalated privileges of the root user on the underlying operating system.

Remediation

ProductVulnerable rangeFixed versionAdvisory
Cisco Cisco Prime Infrastructurenot specifiedadvisory ↗

References

cvedb.io · NVD · CISA KEV · FIRST EPSS · vendor advisories (CVE Program List v5). Informational only, no warranty — verify every remediation against the vendor advisory before acting on it. This product uses data from the NVD API but is not endorsed or certified by the NVD, CISA, FIRST.org or any vendor named. CVE® is a registered trademark of The MITRE Corporation.