A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.
This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Oct 2023, 18:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn - Vendor Advisory | |
| CWE | CWE-269 | |
| CPE | cpe:2.3:h:cisco:ess-3300-24t-ncp-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1835-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-ncp-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1821-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-ncp-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1831-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-con-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8340-k9:-:*:*:*:*:*:*:* cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-con-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1833-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8140h-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-con-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-ncp-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1101:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8140h-p-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-con-e:-:*:*:*:*:*:*:* |
|
| First Time |
Cisco catalyst Ir1835-k9
Cisco ess-3300-ncp-a Cisco ess-3300-24t-con-e Cisco catalyst Ir1833-k9 Cisco catalyst Ir8140h-p-k9 Cisco Cisco catalyst Ir1831-k9 Cisco ess-3300-con-e Cisco catalyst Ie3300 Rugged Switch Cisco catalyst Ir1101 Cisco catalyst Ie3400 Rugged Switch Cisco ess-3300-24t-ncp-e Cisco ess-3300-con-a Cisco ess-3300-24t-con-a Cisco catalyst Ir8340-k9 Cisco catalyst Ie3200 Rugged Switch Cisco catalyst Ir1821-k9 Cisco ios Xe Cisco catalyst Ir8140h-k9 Cisco ess-3300-ncp-e Cisco ess-3300-24t-ncp-a |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
04 Oct 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-04 17:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-20235
Mitre link : CVE-2023-20235
CVE.ORG link : CVE-2023-20235
JSON object : View
Products Affected
cisco
- ess-3300-con-e
- catalyst_ir1821-k9
- ess-3300-24t-ncp-a
- catalyst_ie3200_rugged_switch
- ess-3300-24t-con-a
- catalyst_ir1833-k9
- catalyst_ir8340-k9
- ess-3300-24t-con-e
- ess-3300-24t-ncp-e
- ess-3300-con-a
- ess-3300-ncp-e
- ios_xe
- catalyst_ir8140h-k9
- catalyst_ie3300_rugged_switch
- catalyst_ir1831-k9
- catalyst_ie3400_rugged_switch
- catalyst_ir8140h-p-k9
- catalyst_ir1835-k9
- catalyst_ir1101
- ess-3300-ncp-a