CVE-2023-20210: Input Validation

Published Jul 12, 2023
·
Updated

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.

Affected Software

128 affected components
Cisco Broadworks Application Delivery Platform Firmware=23.0
Cisco Broadworks Application Delivery Platform Firmware=24.0
Cisco Broadworks Application Delivery Platform Firmware=25.0
Cisco BroadWorks Application Delivery Platform
Cisco Broadworks Application Server Firmware=23.0
Cisco Broadworks Application Server Firmware=24.0
Cisco Broadworks Application Server Firmware=25.0
Cisco BroadWorks Application Server
Cisco Broadworks Database Server Firmware=23.0
Cisco Broadworks Database Server Firmware=24.0
Cisco Broadworks Database Server Firmware=25.0
Cisco Broadworks Database Server
Cisco Broadworks Database Troubleshooting Server Firmware=23.0
Cisco Broadworks Database Troubleshooting Server Firmware=24.0
Cisco Broadworks Database Troubleshooting Server Firmware=25.0
Cisco Broadworks Database Troubleshooting Server
Cisco Broadworks Execution Server Firmware=23.0
Cisco Broadworks Execution Server Firmware=24.0
Cisco Broadworks Execution Server Firmware=25.0
Cisco Broadworks Execution Server
Cisco Broadworks Media Server Firmware=23.0
Cisco Broadworks Media Server Firmware=24.0
Cisco Broadworks Media Server Firmware=25.0
Cisco Broadworks Media Server
Cisco Broadworks Messaging Server Firmware=23.0
Cisco Broadworks Messaging Server Firmware=24.0
Cisco Broadworks Messaging Server Firmware=25.0
Cisco BroadWorks Messaging Server
Cisco Broadworks Network Database Server Firmware=23.0
Cisco Broadworks Network Database Server Firmware=24.0
Cisco Broadworks Network Database Server Firmware=25.0
Cisco Broadworks Network Database Server
Cisco Broadworks Network Function Manager Firmware=23.0
Cisco Broadworks Network Function Manager Firmware=24.0
Cisco Broadworks Network Function Manager Firmware=25.0
Cisco Broadworks Network Function Manager
Cisco Broadworks Network Server Firmware=23.0
Cisco Broadworks Network Server Firmware=24.0
Cisco Broadworks Network Server Firmware=25.0
Cisco BroadWorks Network Server
Cisco Broadworks Profile Server Firmware=23.0
Cisco Broadworks Profile Server Firmware=24.0
Cisco Broadworks Profile Server Firmware=25.0
Cisco Broadworks Profile Server
Cisco Broadworks Service Control Function Server Firmware=23.0
Cisco Broadworks Service Control Function Server Firmware=24.0
Cisco Broadworks Service Control Function Server Firmware=25.0
Cisco Broadworks Service Control Function Server
Cisco Broadworks Sharing Server Firmware=23.0
Cisco Broadworks Sharing Server Firmware=24.0
Cisco Broadworks Sharing Server Firmware=25.0
Cisco Broadworks Sharing Server
Cisco Broadworks Video Server Firmware=23.0
Cisco Broadworks Video Server Firmware=24.0
Cisco Broadworks Video Server Firmware=25.0
Cisco Broadworks Video Server
Cisco Broadworks Webrtc Server Firmware=23.0
Cisco Broadworks Webrtc Server Firmware=24.0
Cisco Broadworks Webrtc Server Firmware=25.0
Cisco Broadworks Webrtc Server
Cisco Broadworks Xtended Services Platform Firmware=23.0
Cisco Broadworks Xtended Services Platform Firmware=24.0
Cisco Broadworks Xtended Services Platform Firmware=25.0
Cisco BroadWorks Xtended Services Platform
All of the following
Any of the following
Cisco Broadworks Application Delivery Platform Firmware=23.0
Cisco Broadworks Application Delivery Platform Firmware=24.0
Cisco Broadworks Application Delivery Platform Firmware=25.0
Cisco BroadWorks Application Delivery Platform
All of the following
Any of the following
Cisco Broadworks Application Server Firmware=23.0
Cisco Broadworks Application Server Firmware=24.0
Cisco Broadworks Application Server Firmware=25.0
Cisco BroadWorks Application Server
All of the following
Any of the following
Cisco Broadworks Database Server Firmware=23.0
Cisco Broadworks Database Server Firmware=24.0
Cisco Broadworks Database Server Firmware=25.0
Cisco Broadworks Database Server
All of the following
Any of the following
Cisco Broadworks Database Troubleshooting Server Firmware=23.0
Cisco Broadworks Database Troubleshooting Server Firmware=24.0
Cisco Broadworks Database Troubleshooting Server Firmware=25.0
Cisco Broadworks Database Troubleshooting Server
All of the following
Any of the following
Cisco Broadworks Execution Server Firmware=23.0
Cisco Broadworks Execution Server Firmware=24.0
Cisco Broadworks Execution Server Firmware=25.0
Cisco Broadworks Execution Server
All of the following
Any of the following
Cisco Broadworks Media Server Firmware=23.0
Cisco Broadworks Media Server Firmware=24.0
Cisco Broadworks Media Server Firmware=25.0
Cisco Broadworks Media Server
All of the following
Any of the following
Cisco Broadworks Messaging Server Firmware=23.0
Cisco Broadworks Messaging Server Firmware=24.0
Cisco Broadworks Messaging Server Firmware=25.0
Cisco BroadWorks Messaging Server
All of the following
Any of the following
Cisco Broadworks Network Database Server Firmware=23.0
Cisco Broadworks Network Database Server Firmware=24.0
Cisco Broadworks Network Database Server Firmware=25.0
Cisco Broadworks Network Database Server
All of the following
Any of the following
Cisco Broadworks Network Function Manager Firmware=23.0
Cisco Broadworks Network Function Manager Firmware=24.0
Cisco Broadworks Network Function Manager Firmware=25.0
Cisco Broadworks Network Function Manager
All of the following
Any of the following
Cisco Broadworks Network Server Firmware=23.0
Cisco Broadworks Network Server Firmware=24.0
Cisco Broadworks Network Server Firmware=25.0
Cisco BroadWorks Network Server
All of the following
Any of the following
Cisco Broadworks Profile Server Firmware=23.0
Cisco Broadworks Profile Server Firmware=24.0
Cisco Broadworks Profile Server Firmware=25.0
Cisco Broadworks Profile Server
All of the following
Any of the following
Cisco Broadworks Service Control Function Server Firmware=23.0
Cisco Broadworks Service Control Function Server Firmware=24.0
Cisco Broadworks Service Control Function Server Firmware=25.0
Cisco Broadworks Service Control Function Server
All of the following
Any of the following
Cisco Broadworks Sharing Server Firmware=23.0
Cisco Broadworks Sharing Server Firmware=24.0
Cisco Broadworks Sharing Server Firmware=25.0
Cisco Broadworks Sharing Server
All of the following
Any of the following
Cisco Broadworks Video Server Firmware=23.0
Cisco Broadworks Video Server Firmware=24.0
Cisco Broadworks Video Server Firmware=25.0
Cisco Broadworks Video Server
All of the following
Any of the following
Cisco Broadworks Webrtc Server Firmware=23.0
Cisco Broadworks Webrtc Server Firmware=24.0
Cisco Broadworks Webrtc Server Firmware=25.0
Cisco Broadworks Webrtc Server
All of the following
Any of the following
Cisco Broadworks Xtended Services Platform Firmware=23.0
Cisco Broadworks Xtended Services Platform Firmware=24.0
Cisco Broadworks Xtended Services Platform Firmware=25.0
Cisco BroadWorks Xtended Services Platform

Event History

Jul 12, 2023
CVE Published
via MITRE·01:53 PM
Data Sourced
via MITRE·01:53 PM
DescriptionSeverityWeakness
Data Sourced
02:15 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-20210?

CVE-2023-20210 has a high severity rating due to its ability to allow privileged escalation to the root user.

2

How can I fix CVE-2023-20210?

To remediate CVE-2023-20210, apply the latest security patches provided by Cisco for the affected BroadWorks versions.

3

Who is affected by CVE-2023-20210?

CVE-2023-20210 affects Cisco BroadWorks versions 23.0, 24.0, and 25.0 across various components.

4

What type of attack could exploit CVE-2023-20210?

CVE-2023-20210 could be exploited by an authenticated local attacker issuing crafted commands to the system CLI.

5

Is there a workaround for CVE-2023-20210?

Currently, there are no known workarounds for CVE-2023-20210, making patching the only effective mitigation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203