cisco-sa-dnac-privesc-QFXe74RS: Cisco DNA Center Privilege Escalation Vulnerability

Published Mar 22, 2023

Updated

A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device.This vulnerability is due to the unintended exposure of sensitive information. An

Affected Software

1 affected component

Cisco DNA Center

Event History

Mar 22, 2023

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-20055

Frequently Asked Questions

What is the severity of cisco-sa-dnac-privesc-QFXe74RS?

The severity of cisco-sa-dnac-privesc-QFXe74RS is considered high due to the potential for privilege escalation.

How do I fix cisco-sa-dnac-privesc-QFXe74RS?

To fix cisco-sa-dnac-privesc-QFXe74RS, apply the latest security updates provided by Cisco for the affected Cisco DNA Center software.

What are the potential impacts of cisco-sa-dnac-privesc-QFXe74RS?

The potential impacts of cisco-sa-dnac-privesc-QFXe74RS include unauthorized access and modification of network configurations.

Who is affected by cisco-sa-dnac-privesc-QFXe74RS?

Organizations using Cisco DNA Center software versions that are vulnerable are affected by cisco-sa-dnac-privesc-QFXe74RS.

Is there a workaround for cisco-sa-dnac-privesc-QFXe74RS?

Currently, there is no known workaround for cisco-sa-dnac-privesc-QFXe74RS; applying the patch is recommended.