← Database

CVE-2023-20273

HIGH CVSS: 7.2 Published: 2023-10-25 Modified: 2026-06-17

Description

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.

Affected Platforms

Cisco Catalyst 3850-24U-ECisco Catalyst 3650-48Tq-SCisco Catalyst 3850-48F-ECisco Catalyst 3850-24U-SCisco Catalyst 3650-48Fd-LCisco Catalyst 3850-48T-ECisco Catalyst 3850-24U-LCisco Catalyst 3650-24Ts-SCisco Catalyst 3650-24Ps-ECisco Catalyst 3650-48Fq-L

Weakness Type

CWE-78, CWE-78

References