Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20029

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.

Published

2023-03-23T17:15:13.940

Last Modified

2024-11-21T07:40:23.523

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-122
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 17.7.1 Yes
Operating System cisco ios_xe 17.8.1 Yes
Hardware cisco catalyst_9200 - No
Hardware cisco catalyst_9200cx - No
Hardware cisco catalyst_9200l - No
Hardware cisco catalyst_9300 - No
Hardware cisco catalyst_9300-24p-a - No
Hardware cisco catalyst_9300-24p-e - No
Hardware cisco catalyst_9300-24s-a - No
Hardware cisco catalyst_9300-24s-e - No
Hardware cisco catalyst_9300-24t-a - No
Hardware cisco catalyst_9300-24t-e - No
Hardware cisco catalyst_9300-24u-a - No
Hardware cisco catalyst_9300-24u-e - No
Hardware cisco catalyst_9300-24ux-a - No
Hardware cisco catalyst_9300-24ux-e - No
Hardware cisco catalyst_9300-48p-a - No
Hardware cisco catalyst_9300-48p-e - No
Hardware cisco catalyst_9300-48s-a - No
Hardware cisco catalyst_9300-48s-e - No
Hardware cisco catalyst_9300-48t-a - No
Hardware cisco catalyst_9300-48t-e - No
Hardware cisco catalyst_9300-48u-a - No
Hardware cisco catalyst_9300-48u-e - No
Hardware cisco catalyst_9300-48un-a - No
Hardware cisco catalyst_9300-48un-e - No
Hardware cisco catalyst_9300-48uxm-a - No
Hardware cisco catalyst_9300-48uxm-e - No
Hardware cisco catalyst_9300l - No
Hardware cisco catalyst_9300l-24p-4g-a - No
Hardware cisco catalyst_9300l-24p-4g-e - No
Hardware cisco catalyst_9300l-24p-4x-a - No
Hardware cisco catalyst_9300l-24p-4x-e - No
Hardware cisco catalyst_9300l-24t-4g-a - No
Hardware cisco catalyst_9300l-24t-4g-e - No
Hardware cisco catalyst_9300l-24t-4x-a - No
Hardware cisco catalyst_9300l-24t-4x-e - No
Hardware cisco catalyst_9300l-48p-4g-a - No
Hardware cisco catalyst_9300l-48p-4g-e - No
Hardware cisco catalyst_9300l-48p-4x-a - No
Hardware cisco catalyst_9300l-48p-4x-e - No
Hardware cisco catalyst_9300l-48t-4g-a - No
Hardware cisco catalyst_9300l-48t-4g-e - No
Hardware cisco catalyst_9300l-48t-4x-a - No
Hardware cisco catalyst_9300l-48t-4x-e - No
Hardware cisco catalyst_9300l_stack - No
Hardware cisco catalyst_9300lm - No
Hardware cisco catalyst_9300x - No
References