CVE-2023-20217

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing certain commands using sudo. A successful exploit could allow the attacker to view arbitrary files as root on the underlying operating system. The attacker must have valid credentials on the affected device.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-va-priv-esc-PUdgrx8E	Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-va-priv-esc-PUdgrx8E	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:thousandeyes_enterprise_agent::::::::
	cpe:2.3:a:cisco:thousandeyes_recorder:-:::::::*

History

21 Nov 2024, 07:40

Type	Values Removed	Values Added
References	~~() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-va-priv-esc-PUdgrx8E - Vendor Advisory~~	() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-va-priv-esc-PUdgrx8E - Vendor Advisory

25 Jan 2024, 17:15

Type	Values Removed	Values Added
References	~~{'url': 'http://seclists.org/fulldisclosure/2023/Aug/19', 'name': 'http://seclists.org/fulldisclosure/2023/Aug/19', 'tags': ['Exploit', 'Mailing List', 'Third Party Advisory'], 'refsource': 'MISC'}~~ {'url': 'http://packetstormsecurity.com/files/174232/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Read.html', 'name': 'http://packetstormsecurity.com/files/174232/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Read.html', 'tags': ['Exploit', 'Third Party Advisory', 'VDB Entry'], 'refsource': 'MISC'}

25 Aug 2023, 18:27

Type	Values Removed	Values Added
CWE		NVD-CWE-noinfo
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
First Time		Cisco thousandeyes Enterprise Agent Cisco thousandeyes Recorder Cisco
References	~~(MISC) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-va-priv-esc-PUdgrx8E -~~	(MISC) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-va-priv-esc-PUdgrx8E - Vendor Advisory
References	~~(MISC) http://packetstormsecurity.com/files/174232/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Read.html -~~	(MISC) http://packetstormsecurity.com/files/174232/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Read.html - Exploit, Third Party Advisory, VDB Entry
References	~~(MISC) http://seclists.org/fulldisclosure/2023/Aug/19 -~~	(MISC) http://seclists.org/fulldisclosure/2023/Aug/19 - Exploit, Mailing List, Third Party Advisory
CPE		cpe:2.3:a:cisco:thousandeyes_recorder:-:::::::* cpe:2.3:a:cisco:thousandeyes_enterprise_agent::::::::

18 Aug 2023, 17:15

Type	Values Removed	Values Added
References		(MISC) http://packetstormsecurity.com/files/174232/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Read.html -

17 Aug 2023, 22:15

Type	Values Removed	Values Added
References		(MISC) http://seclists.org/fulldisclosure/2023/Aug/19 -

16 Aug 2023, 22:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-08-16 22:15

Updated : 2024-11-21 07:40

NVD link : CVE-2023-20217

Mitre link : CVE-2023-20217

CVE.ORG link : CVE-2023-20217

JSON object : View

Products Affected

cisco

thousandeyes_recorder
thousandeyes_enterprise_agent

CWE

CWE-250

Execution with Unnecessary Privileges

NVD-CWE-noinfo

5.5 /10