Advisories
Cisco PSIRTActive exploitation (sightings)HIGH2023-05-17
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVEs:CVE-2023-20024CVE-2023-20156CVE-2023-20157CVE-2023-20158CVE-2023-20159CVE-2023-20160CVE-2023-20161CVE-2023-20162CVE-2023-20189
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-278027 |
affected |
Cisco |
— |
— |
Cisco PSIRTPoC exploitHIGH2023-05-03
Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability
CVEs:CVE-2023-20126
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-211649 |
affected |
Cisco |
— |
— |
| CVRFPID-278991 |
affected |
Cisco |
— |
— |
Cisco PSIRTPoC exploitHIGH2023-05-17
Cisco Smart Software Manager On-Prem SQL Injection Vulnerability
CVEs:CVE-2023-20110
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-274027 |
affected |
Cisco |
— |
— |
Cisco PSIRTPoC exploitHIGH2023-05-17
Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
CVEs:CVE-2023-20077CVE-2023-20087
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-111903 |
affected |
Cisco |
— |
— |
Cisco PSIRTCoalition ESS < 30%HIGH2023-05-17
Cisco Identity Services Engine Command Injection Vulnerabilities
CVEs:CVE-2023-20163CVE-2023-20164
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-111903 |
affected |
Cisco |
— |
— |
Cisco PSIRTCoalition ESS < 30%HIGH2023-05-17
Cisco Identity Services Engine XML External Entity Injection Vulnerabilities
CVEs:CVE-2023-20173CVE-2023-20174
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-111903 |
affected |
Cisco |
— |
— |
Cisco PSIRTCoalition ESS < 30%HIGH2023-05-17
Cisco DNA Center Software API Vulnerabilities
CVEs:CVE-2023-20182CVE-2023-20184CVE-2023-20183
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-233151 |
affected |
Cisco |
— |
— |
Cisco PSIRTCoalition ESS < 30%HIGH2023-05-17
Cisco Identity Services Engine Path Traversal Vulnerabilities
CVEs:CVE-2023-20166CVE-2023-20167
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-111903 |
affected |
Cisco |
— |
— |
Cisco PSIRTCoalition ESS < 30%HIGH2023-05-17
Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities
CVEs:CVE-2023-20106CVE-2023-20171CVE-2023-20172
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-111903 |
affected |
Cisco |
— |
— |
Cisco PSIRTCoalition ESS < 30%HIGH2023-05-17
Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability
CVEs:CVE-2023-20003
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-280012 |
affected |
Cisco |
— |
— |