Логотип exploitDog
bind:CVE-2023-20044
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-20044

Количество 3

Количество 3

nvd логотип

CVE-2023-20044

около 3 лет назад

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

CVSS3: 6.7
EPSS: Низкий
github логотип

GHSA-5mpw-67fp-pg56

около 3 лет назад

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

CVSS3: 7.3
EPSS: Низкий
fstec логотип

BDU:2023-00298

около 3 лет назад

Уязвимость облачного агента службы технической поддержки клиентов Cisco CX Cloud Agent, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии и получить полный контроль над устройством

CVSS3: 6.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

CVSS3: 6.7
0%
Низкий
около 3 лет назад
github логотип
GHSA-5mpw-67fp-pg56

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

CVSS3: 7.3
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2023-00298

Уязвимость облачного агента службы технической поддержки клиентов Cisco CX Cloud Agent, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии и получить полный контроль над устройством

CVSS3: 6.7
0%
Низкий
около 3 лет назад

Уязвимостей на страницу