CVE-2023-20210: Input Validation

First published: Wed Jul 12 2023(Updated: )

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.

Credit: ykramarz@cisco.com ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-latest
• collector/nvd-index
• agent/author
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/references
• agent/weakness
• agent/description
• agent/first-publish-date
• agent/event
• agent/last-modified-date
• agent/tags
• agent/softwarecombine
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• vendor/cisco
• canonical/cisco broadworks application delivery platform firmware
• version/cisco broadworks application delivery platform firmware/23.0
• version/cisco broadworks application delivery platform firmware/24.0
• version/cisco broadworks application delivery platform firmware/25.0
• canonical/cisco broadworks application delivery platform
• canonical/cisco broadworks application server firmware
• version/cisco broadworks application server firmware/23.0
• version/cisco broadworks application server firmware/24.0
• version/cisco broadworks application server firmware/25.0
• canonical/cisco broadworks application server
• canonical/cisco broadworks database server firmware
• version/cisco broadworks database server firmware/23.0
• version/cisco broadworks database server firmware/24.0
• version/cisco broadworks database server firmware/25.0
• canonical/cisco broadworks database server
• canonical/cisco broadworks database troubleshooting server firmware
• version/cisco broadworks database troubleshooting server firmware/23.0
• version/cisco broadworks database troubleshooting server firmware/24.0
• version/cisco broadworks database troubleshooting server firmware/25.0
• canonical/cisco broadworks database troubleshooting server
• canonical/cisco broadworks execution server firmware
• version/cisco broadworks execution server firmware/23.0
• version/cisco broadworks execution server firmware/24.0
• version/cisco broadworks execution server firmware/25.0
• canonical/cisco broadworks execution server
• canonical/cisco broadworks media server firmware
• version/cisco broadworks media server firmware/23.0
• version/cisco broadworks media server firmware/24.0
• version/cisco broadworks media server firmware/25.0
• canonical/cisco broadworks media server
• canonical/cisco broadworks messaging server firmware
• version/cisco broadworks messaging server firmware/23.0
• version/cisco broadworks messaging server firmware/24.0
• version/cisco broadworks messaging server firmware/25.0
• canonical/cisco broadworks messaging server
• canonical/cisco broadworks network database server firmware
• version/cisco broadworks network database server firmware/23.0
• version/cisco broadworks network database server firmware/24.0
• version/cisco broadworks network database server firmware/25.0
• canonical/cisco broadworks network database server
• canonical/cisco broadworks network function manager firmware
• version/cisco broadworks network function manager firmware/23.0
• version/cisco broadworks network function manager firmware/24.0
• version/cisco broadworks network function manager firmware/25.0
• canonical/cisco broadworks network function manager
• canonical/cisco broadworks network server firmware
• version/cisco broadworks network server firmware/23.0
• version/cisco broadworks network server firmware/24.0
• version/cisco broadworks network server firmware/25.0
• canonical/cisco broadworks network server
• canonical/cisco broadworks profile server firmware
• version/cisco broadworks profile server firmware/23.0
• version/cisco broadworks profile server firmware/24.0
• version/cisco broadworks profile server firmware/25.0
• canonical/cisco broadworks profile server
• canonical/cisco broadworks service control function server firmware
• version/cisco broadworks service control function server firmware/23.0
• version/cisco broadworks service control function server firmware/24.0
• version/cisco broadworks service control function server firmware/25.0
• canonical/cisco broadworks service control function server
• canonical/cisco broadworks sharing server firmware
• version/cisco broadworks sharing server firmware/23.0
• version/cisco broadworks sharing server firmware/24.0
• version/cisco broadworks sharing server firmware/25.0
• canonical/cisco broadworks sharing server
• canonical/cisco broadworks video server firmware
• version/cisco broadworks video server firmware/23.0
• version/cisco broadworks video server firmware/24.0
• version/cisco broadworks video server firmware/25.0
• canonical/cisco broadworks video server
• canonical/cisco broadworks webrtc server firmware
• version/cisco broadworks webrtc server firmware/23.0
• version/cisco broadworks webrtc server firmware/24.0
• version/cisco broadworks webrtc server firmware/25.0
• canonical/cisco broadworks webrtc server
• canonical/cisco broadworks xtended services platform firmware
• version/cisco broadworks xtended services platform firmware/23.0
• version/cisco broadworks xtended services platform firmware/24.0
• version/cisco broadworks xtended services platform firmware/25.0
• canonical/cisco broadworks xtended services platform