CVE-2023-20171
Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.4EPSS 0.4%KEV nãoPoC —Patch referenciado
Lifecycle
18 May 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
Cisco · Cisco Identity Services Engine SoftwareWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →