VDB
CVE-2023-20043
CVE-2023-20043
PUBLISHED
CVSS 6.699999809265137 MEDIUM
A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.
EPSS 0.21% · 11.2th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.21%
11.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco CX Cloud Agent | 0.0.1, 0.0.2, 0.9.2 |
| cisco | cx_cloud_agent | 0, 2.2 |
Timeline
- Jan 19, 2023 CVE Published
- Jan 20, 2023 EPSS Score
- Mar 2, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 11, 2023 EPSS Score
- May 22, 2023 EPSS Score
- Jul 2, 2023 EPSS Score
- Aug 11, 2023 EPSS Score
- Sep 21, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
- Dec 11, 2023 EPSS Score
- Jan 21, 2024 EPSS Score