CVE-2023-20115: Medium severity cisco nx-os vulnerability
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected device. This vulnerability is due to a logic error when verifying the user role when an SFTP connection is opened to an affected device. An attacker could exploit this vulnerability by connecting and authenticating via SFTP as a valid, non-administrator user. A successful exploit could allow the attacker to read or overwrite files from the underlying operating system with the privileges of the authenticated user. There are workarounds that address this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20115?
CVE-2023-20115 is rated as high severity due to the potential impact of file download or overwrite by an authenticated remote attacker.
How do I fix CVE-2023-20115?
To fix CVE-2023-20115, upgrade your Cisco Nexus 3000 or 9000 Series Switches to the latest available NX-OS version as recommended by Cisco.
Which Cisco devices are affected by CVE-2023-20115?
CVE-2023-20115 affects Cisco Nexus 3000 Series and 9000 Series Switches operating in standalone NX-OS mode.
Can CVE-2023-20115 be exploited remotely?
Yes, CVE-2023-20115 can be exploited remotely by an authenticated attacker to manipulate files on the device's operating system.
What kind of access do I need to exploit CVE-2023-20115?
Exploiting CVE-2023-20115 requires authenticated access to the affected Cisco Nexus devices.