CVE-2023-20016: Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability
First published: Thu Feb 23 2023(Updated: )
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method used for the backup function. An attacker could exploit this vulnerability by leveraging a static key used for the backup configuration feature. A successful exploit could allow the attacker to decrypt sensitive information that is stored in full state and configuration backup files, such as local user credentials, authentication server passwords, Simple Network Management Protocol (SNMP) community names, and other credentials.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco UCS Central | <4.2\(3c\) | |
| Cisco UCS 6536 Firmware | ||
| Cisco UCS 6536 Firmware | ||
| Cisco UCS 64108 Firmware | ||
| Cisco UCS 64108 firmware | ||
| Cisco UCS 6454 Firmware | ||
| Cisco UCS 6454 Fabric Interconnect | ||
| Cisco UCS 6200 Firmware | ||
| Cisco UCS 6200 firmware | ||
| Cisco UCS 6248UP Firmware | ||
| Cisco UCS 6248UP Firmware | ||
| Cisco UCS 6296UP Firmware | ||
| Cisco UCS 6296UP Firmware | ||
| Cisco UCS 6300 firmware | ||
| Cisco UCS 6300 firmware | ||
| Cisco UCS 6324 Firmware | ||
| Cisco UCS 6324 Firmware | ||
| Cisco UCS 6332 Fabric Interconnect firmware | ||
| Cisco UCS 6332 | ||
| Cisco UCS 6332-16up Fabric Interconnect firmware | ||
| Cisco UCS 6332-16UP Fabric Interconnect firmware | ||
| Cisco FX-OS | <2.6.1 | |
| Cisco Firepower 4100 Series | ||
| Cisco Firepower 4110 Next-Generation Firewall | ||
| Cisco Firepower 4112 Firmware | ||
| Cisco Firepower 4115 | ||
| Cisco Firepower 4120 Next-Generation Firewall | ||
| Cisco Firepower 4125 firmware | ||
| Cisco Firepower 4140 Next-Generation Firewall | ||
| Cisco Firepower 4145 firmware | ||
| Cisco Firepower 4150 Next-Generation Firewall | ||
| Cisco Firepower 9300 | ||
| Cisco Firepower 9300 | ||
| Cisco Firepower 9300 | ||
| Cisco Firepower 9300 | ||
| Cisco Firepower 9300 | ||
| Cisco Firepower 9300 | ||
| Cisco Firepower 9300 | ||
| Cisco Firepower 9300 SM-56 X 3 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-20016.
What is the severity level of CVE-2023-20016?
CVE-2023-20016 has a severity level of medium (6.5).
What software is affected by CVE-2023-20016?
Cisco UCS Manager Software and Cisco FXOS Software are affected by CVE-2023-20016.
How can an unauthenticated attacker exploit CVE-2023-20016?
An unauthenticated attacker with access to a backup file can exploit CVE-2023-20016 to decrypt sensitive information stored in the full state and configuration backup file.
Where can I find more information about CVE-2023-20016?
You can find more information about CVE-2023-20016 in the Cisco Security Advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA
- agent/weakness
- agent/type
- agent/references
- agent/author
- agent/description
- agent/title
- agent/severity
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ucs central
- canonical/cisco ucs 6536 firmware
- canonical/cisco ucs 64108 firmware
- canonical/cisco ucs 6454 firmware
- canonical/cisco ucs 6454 fabric interconnect
- canonical/cisco ucs 6200 firmware
- canonical/cisco ucs 6248up firmware
- canonical/cisco ucs 6296up firmware
- canonical/cisco ucs 6300 firmware
- canonical/cisco ucs 6324 firmware
- canonical/cisco ucs 6332 fabric interconnect firmware
- canonical/cisco ucs 6332
- canonical/cisco ucs 6332-16up fabric interconnect firmware
- canonical/cisco fx-os
- canonical/cisco firepower 4100 series
- canonical/cisco firepower 4110 next-generation firewall
- canonical/cisco firepower 4112 firmware
- canonical/cisco firepower 4115
- canonical/cisco firepower 4120 next-generation firewall
- canonical/cisco firepower 4125 firmware
- canonical/cisco firepower 4140 next-generation firewall
- canonical/cisco firepower 4145 firmware
- canonical/cisco firepower 4150 next-generation firewall
- canonical/cisco firepower 9300
- canonical/cisco firepower 9300 sm-56 x 3 firmware