CVE-2023-20260
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Summary
A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper processing of command line arguments to application scripts. An attacker could exploit this vulnerability by issuing a command on the CLI with malicious options. A successful exploit could allow the attacker to gain the escalated privileges of the root user on the underlying operating system.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Prime Infrastructure | 2.0.0 | affected |
| Cisco | Cisco Prime Infrastructure | 2.0.10 | affected |
| Cisco | Cisco Prime Infrastructure | 2.0.39 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.0 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.1 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.2 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.56 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.0 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.1 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.2 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.10 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.8 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.4 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.7 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.5 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.9 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.2 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.2 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 05 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 06 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2.0-FIPS | affected |
| Cisco | Cisco Prime Infrastructure | 3.2.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.2 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP10 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP15 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP11 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP8 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP16 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP14 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP9 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP9 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP10 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP13 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP12 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP8 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP11 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 06 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 07 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.0 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 05 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.0 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.4 Update 01 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.6 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.7 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.4.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.4.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.4.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.6 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.3.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 7.0.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.1.2.2 | affected |
Weaknesses
- CWE-284: Improper Access Control
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.