VDB
CVE-2023-20037
CVE-2023-20037
PUBLISHED
CVSS 5.400000095367432 MEDIUM
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
EPSS 0.14% · 34.2th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.14%
34.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Industrial Network Director | 1.6.0, 1.5.1, 1.0.0 |
| Cisco | N/A | |
| Cisco | Small Business | |
| cisco | industrial_network_director | 0 |
Exploit Intelligence
- cisco-sa-ind-fZyVjJtG (circl)
Timeline
- Jan 12, 2023 CVE Published
- Jan 17, 2023 CVE Updated
- Jan 20, 2023 EPSS Score
- Mar 2, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 11, 2023 EPSS Score
- May 22, 2023 EPSS Score
- Jul 1, 2023 EPSS Score
- Aug 11, 2023 EPSS Score
- Sep 20, 2023 EPSS Score
- Oct 31, 2023 EPSS Score
- Dec 10, 2023 EPSS Score
References
- cisco-sa-ind-fZyVjJtG url
- https://nvd.nist.gov/vuln/detail/CVE-2023-20037 advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-auth-bypass-pSqxZRPR advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-dos-HpkeYzp advisory