Skip to content
OpenAdvisories
Medium WID-SEC-2023-0870 2 CVEs

Cisco Identity Services Engine (ISE): Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Apr 5, 2023 · Updated Apr 5, 2023 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE) 3.2 < 3.2P1

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um seine Privilegien zu erhöhen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 2

  • Medium 6.0
    CVE-2023-20152

    Cisco Identity Services Engine Command Injection Vulnerabilities

    Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulner…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.0
    CVE-2023-20153

    Cisco Identity Services Engine Command Injection Vulnerabilities

    Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulner…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References