high
8.8
CWE
78 20
Advisory Published
Updated

CVE-2023-20231: OS Command Injection

First published: Wed Sep 27 2023(Updated: )

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to execute arbitrary Cisco IOS XE Software CLI commands with level 15 privileges. Note: This vulnerability is exploitable only if the attacker obtains the credentials for a Lobby Ambassador account. This account is not configured by default.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
All of
Any of
Cisco IOS XE=16.12.4
Cisco IOS XE=16.12.4a
Cisco IOS XE=16.12.5
Cisco IOS XE=16.12.5a
Cisco IOS XE=16.12.5b
Cisco IOS XE=16.12.6
Cisco IOS XE=16.12.6a
Cisco IOS XE=16.12.7
Cisco IOS XE=16.12.8
Cisco IOS XE=16.12.9
Cisco IOS XE=17.2.2
Cisco IOS XE=17.2.3
Cisco IOS XE=17.3.1
Cisco IOS XE=17.3.1a
Cisco IOS XE=17.3.1w
Cisco IOS XE=17.3.1x
Cisco IOS XE=17.3.1z
Cisco IOS XE=17.3.2
Cisco IOS XE=17.3.3
Cisco IOS XE=17.3.4
Cisco IOS XE=17.3.4a
Cisco IOS XE=17.3.4b
Cisco IOS XE=17.3.4c
Cisco IOS XE=17.3.5
Cisco IOS XE=17.3.5a
Cisco IOS XE=17.3.5b
Cisco IOS XE=17.3.6
Cisco IOS XE=17.4.1
Cisco IOS XE=17.4.1a
Cisco IOS XE=17.4.1b
Cisco IOS XE=17.4.2
Cisco IOS XE=17.4.2a
Cisco IOS XE=17.5.1
Cisco IOS XE=17.5.1a
Cisco IOS XE=17.5.1b
Cisco IOS XE=17.5.1c
Cisco IOS XE=17.6.1
Cisco IOS XE=17.6.1.z
Cisco IOS XE=17.6.1a
Cisco IOS XE=17.6.1w
Cisco IOS XE=17.6.1x
Cisco IOS XE=17.6.1y
Cisco IOS XE=17.6.1z1
Cisco IOS XE=17.6.2
Cisco IOS XE=17.6.3
Cisco IOS XE=17.6.3a
Cisco IOS XE=17.6.4
Cisco IOS XE=17.6.5
Cisco IOS XE=17.7.1
Cisco IOS XE=17.7.1a
Cisco IOS XE=17.7.1b
Cisco IOS XE=17.7.2
Cisco IOS XE=17.8.1
Cisco IOS XE=17.8.1a
Cisco IOS XE=17.9.1
Cisco IOS XE=17.9.1a
Cisco IOS XE=17.9.1w
Cisco IOS XE=17.9.1x
Cisco IOS XE=17.9.1x1
Cisco IOS XE=17.9.1y
Cisco IOS XE=17.9.2
Cisco IOS XE=17.9.2a
Cisco IOS XE=17.9.2b
Cisco IOS XE=17.10.1
Cisco IOS XE=17.10.1a
Cisco IOS XE=17.10.1b
Cisco IOS XE=17.91w
Any of
Cisco Catalyst 9105 Firmware
Cisco Catalyst 9105 Firmware
Cisco Catalyst 9105AX
Cisco Catalyst 9115 AP Firmware
Cisco Catalyst 9115 AP Firmware
Cisco Catalyst 9115AXI Firmware
Cisco Catalyst 9117AX Firmware
Cisco Catalyst 9117AX
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9124 Firmware
Cisco Catalyst 9124 Firmware
Cisco Catalyst 9124 Firmware
Cisco Catalyst 9130 Firmware
Cisco Catalyst 9130 Firmware
Cisco Catalyst 9130 Firmware
Cisco Catalyst 9300 Firmware
Cisco Catalyst 9300-24p-a Firmware
Cisco Catalyst 9300-24p-e Firmware
Cisco Catalyst 9300-24s-a Firmware
Cisco Catalyst 9300-24s-e Firmware
Cisco Catalyst 9300-24t-a Firmware
Cisco Catalyst 9300-24t-e Firmware
Cisco Catalyst 9300-24u-a Firmware
Cisco Catalyst 9300-24u-e Firmware
Cisco Catalyst 9300-24ux-a Firmware
Cisco Catalyst 9300-24ux-e Firmware
Cisco Catalyst 9300-48p-a Firmware
Cisco Catalyst 9300-48p-e Firmware
Cisco Catalyst 9300-48s-a Firmware
Cisco Catalyst 9300-48s-e Firmware
Cisco Catalyst 9300-48t-a Firmware
Cisco Catalyst 9300-48t-e Firmware
Cisco Catalyst 9300-48u-a Firmware
Cisco Catalyst 9300-48u-e Firmware
Cisco Catalyst 9300-48un-a Firmware
Cisco Catalyst 9300-48un-e Firmware
Cisco Catalyst 9300-48uxm-a Firmware
Cisco Catalyst 9300-48uxm-e Firmware
Cisco Catalyst 9300l Firmware
Cisco Catalyst 9300L-24P-4G-A Firmware
Cisco Catalyst 9300l-24p-4g-e Firmware
Cisco Catalyst 9300L-24P-4X-A Firmware
Cisco Catalyst 9300L-48P-4X-E Firmware
Cisco Catalyst 9300l-24t-4g-a Firmware
Cisco Catalyst 9300L-24T-4G-E Firmware
Cisco Catalyst 9300l-24t-4x-a Firmware
Cisco Catalyst 9300L-24T-4X-E Firmware
Cisco Catalyst 9300L-48P-4G-A Firmware
Cisco Catalyst 9300l-48p-4g-e Firmware
Cisco Catalyst 9300l-48p-4x-a Firmware
Cisco Catalyst 9300L-48P-4X-E Firmware
Cisco Catalyst 9300l-48t-4g-a Firmware
Cisco Catalyst 9300l-48t-4g-e Firmware
Cisco Catalyst 9300l-48t-4x-a Firmware
Cisco Catalyst 9300L-48T-4X-E Firmware
Cisco Catalyst 9300L Stack
Cisco Catalyst 9300lm Firmware
Cisco Catalyst 9300x Firmware
Cisco Catalyst 9400
Cisco Catalyst C9407R
Cisco Catalyst C9410R
Cisco Catalyst 9500 Series
Cisco Catalyst 9500H
Cisco Catalyst 9800 Firmware
Cisco Catalyst 9800-40
Cisco Catalyst 9800-80
Cisco Catalyst 9800-CL
Cisco Catalyst 9800-L
Cisco Catalyst 9800-L
Cisco Catalyst 9800-L
Cisco IOS XE=16.12.4
Cisco IOS XE=16.12.4a
Cisco IOS XE=16.12.5
Cisco IOS XE=16.12.5a
Cisco IOS XE=16.12.5b
Cisco IOS XE=16.12.6
Cisco IOS XE=16.12.6a
Cisco IOS XE=16.12.7
Cisco IOS XE=16.12.8
Cisco IOS XE=16.12.9
Cisco IOS XE=17.2.2
Cisco IOS XE=17.2.3
Cisco IOS XE=17.3.1
Cisco IOS XE=17.3.1a
Cisco IOS XE=17.3.1w
Cisco IOS XE=17.3.1x
Cisco IOS XE=17.3.1z
Cisco IOS XE=17.3.2
Cisco IOS XE=17.3.3
Cisco IOS XE=17.3.4
Cisco IOS XE=17.3.4a
Cisco IOS XE=17.3.4b
Cisco IOS XE=17.3.4c
Cisco IOS XE=17.3.5
Cisco IOS XE=17.3.5a
Cisco IOS XE=17.3.5b
Cisco IOS XE=17.3.6
Cisco IOS XE=17.4.1
Cisco IOS XE=17.4.1a
Cisco IOS XE=17.4.1b
Cisco IOS XE=17.4.2
Cisco IOS XE=17.4.2a
Cisco IOS XE=17.5.1
Cisco IOS XE=17.5.1a
Cisco IOS XE=17.5.1b
Cisco IOS XE=17.5.1c
Cisco IOS XE=17.6.1
Cisco IOS XE=17.6.1.z
Cisco IOS XE=17.6.1a
Cisco IOS XE=17.6.1w
Cisco IOS XE=17.6.1x
Cisco IOS XE=17.6.1y
Cisco IOS XE=17.6.1z1
Cisco IOS XE=17.6.2
Cisco IOS XE=17.6.3
Cisco IOS XE=17.6.3a
Cisco IOS XE=17.6.4
Cisco IOS XE=17.6.5
Cisco IOS XE=17.7.1
Cisco IOS XE=17.7.1a
Cisco IOS XE=17.7.1b
Cisco IOS XE=17.7.2
Cisco IOS XE=17.8.1
Cisco IOS XE=17.8.1a
Cisco IOS XE=17.9.1
Cisco IOS XE=17.9.1a
Cisco IOS XE=17.9.1w
Cisco IOS XE=17.9.1x
Cisco IOS XE=17.9.1x1
Cisco IOS XE=17.9.1y
Cisco IOS XE=17.9.2
Cisco IOS XE=17.9.2a
Cisco IOS XE=17.9.2b
Cisco IOS XE=17.10.1
Cisco IOS XE=17.10.1a
Cisco IOS XE=17.10.1b
Cisco IOS XE=17.91w
Cisco Catalyst 9105 Firmware
Cisco Catalyst 9105 Firmware
Cisco Catalyst 9105AX
Cisco Catalyst 9115 AP Firmware
Cisco Catalyst 9115 AP Firmware
Cisco Catalyst 9115AXI Firmware
Cisco Catalyst 9117AX Firmware
Cisco Catalyst 9117AX
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9120 Firmware
Cisco Catalyst 9124 Firmware
Cisco Catalyst 9124 Firmware
Cisco Catalyst 9124 Firmware
Cisco Catalyst 9130 Firmware
Cisco Catalyst 9130 Firmware
Cisco Catalyst 9130 Firmware
Cisco Catalyst 9300 Firmware
Cisco Catalyst 9300-24p-a Firmware
Cisco Catalyst 9300-24p-e Firmware
Cisco Catalyst 9300-24s-a Firmware
Cisco Catalyst 9300-24s-e Firmware
Cisco Catalyst 9300-24t-a Firmware
Cisco Catalyst 9300-24t-e Firmware
Cisco Catalyst 9300-24u-a Firmware
Cisco Catalyst 9300-24u-e Firmware
Cisco Catalyst 9300-24ux-a Firmware
Cisco Catalyst 9300-24ux-e Firmware
Cisco Catalyst 9300-48p-a Firmware
Cisco Catalyst 9300-48p-e Firmware
Cisco Catalyst 9300-48s-a Firmware
Cisco Catalyst 9300-48s-e Firmware
Cisco Catalyst 9300-48t-a Firmware
Cisco Catalyst 9300-48t-e Firmware
Cisco Catalyst 9300-48u-a Firmware
Cisco Catalyst 9300-48u-e Firmware
Cisco Catalyst 9300-48un-a Firmware
Cisco Catalyst 9300-48un-e Firmware
Cisco Catalyst 9300-48uxm-a Firmware
Cisco Catalyst 9300-48uxm-e Firmware
Cisco Catalyst 9300l Firmware
Cisco Catalyst 9300L-24P-4G-A Firmware
Cisco Catalyst 9300l-24p-4g-e Firmware
Cisco Catalyst 9300L-24P-4X-A Firmware
Cisco Catalyst 9300L-48P-4X-E Firmware
Cisco Catalyst 9300l-24t-4g-a Firmware
Cisco Catalyst 9300L-24T-4G-E Firmware
Cisco Catalyst 9300l-24t-4x-a Firmware
Cisco Catalyst 9300L-24T-4X-E Firmware
Cisco Catalyst 9300L-48P-4G-A Firmware
Cisco Catalyst 9300l-48p-4g-e Firmware
Cisco Catalyst 9300l-48p-4x-a Firmware
Cisco Catalyst 9300L-48P-4X-E Firmware
Cisco Catalyst 9300l-48t-4g-a Firmware
Cisco Catalyst 9300l-48t-4g-e Firmware
Cisco Catalyst 9300l-48t-4x-a Firmware
Cisco Catalyst 9300L-48T-4X-E Firmware
Cisco Catalyst 9300L Stack
Cisco Catalyst 9300lm Firmware
Cisco Catalyst 9300x Firmware
Cisco Catalyst 9400
Cisco Catalyst C9407R
Cisco Catalyst C9410R
Cisco Catalyst 9500 Series
Cisco Catalyst 9500H
Cisco Catalyst 9800 Firmware
Cisco Catalyst 9800-40
Cisco Catalyst 9800-80
Cisco Catalyst 9800-CL
Cisco Catalyst 9800-L
Cisco Catalyst 9800-L
Cisco Catalyst 9800-L

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2023-20231?

    CVE-2023-20231 has been rated as a critical severity vulnerability.

  • How do I fix CVE-2023-20231?

    To fix CVE-2023-20231, upgrade your affected Cisco IOS XE software to the recommended versions listed in the advisory.

  • What devices are affected by CVE-2023-20231?

    CVE-2023-20231 affects multiple versions of Cisco IOS XE, particularly versions 16.12.4 to 17.10.1.

  • What type of attack does CVE-2023-20231 enable?

    CVE-2023-20231 enables authenticated remote attackers to perform injection attacks due to insufficient input validation.

  • Is CVE-2023-20231 being exploited in the wild?

    Yes, CVE-2023-20231 is currently being exploited in active attacks.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203