CVE-2023-20182: Cisco DNA Center Software API Vulnerabilities
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for these multiple vulnerabilities in Cisco DNA Center Software?
The vulnerability ID for these multiple vulnerabilities in Cisco DNA Center Software is CVE-2023-20182.
What is the severity of CVE-2023-20182?
The severity of CVE-2023-20182 is high, with a CVSS score of 8.8.
What can an attacker do with CVE-2023-20182?
An authenticated remote attacker can read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user.
Which version of Cisco DNA Center Software is affected by CVE-2023-20182?
Cisco DNA Center Software versions up to and including 2.3.3.7 and versions between 2.3.4 and 2.3.5.3 are affected by CVE-2023-20182.
Where can I find more information about CVE-2023-20182?
You can find more information about CVE-2023-20182 in the Cisco Security Advisory at the following link: [Cisco Security Advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-multiple-kTQkGU3).