DeutschShown in its original language — a full translation is planned for a future version.
Cisco Identity Services Engine (ISE): Mehrere Schwachstellen
view advisory published 2023-05-18
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen oder Dateien zu manipulieren.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20174US | medium4.9 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or cond… | ||||
| CVE-2023-20173US | medium4.9 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or cond… | ||||
| CVE-2023-20172US | medium4.9 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To expl… | ||||
| CVE-2023-20171US | medium6.5 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To expl… | ||||
| CVE-2023-20167US | medium4.9 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to eithe… | ||||
| CVE-2023-20166US | medium6.7 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to eithe… | ||||
| CVE-2023-20164US | high7.2 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and e… | ||||
| CVE-2023-20163US | high7.2 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and e… | ||||
| CVE-2023-20106US | low3.8 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To expl… | ||||
| CVE-2023-20087US | medium6.5 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files fro… | ||||
| CVE-2023-20077US | medium6.5 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files fro… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory Cisco-sa-ise-file-delete-read-PK5ghDDd vom 2023-05-18external
- Cisco Security Advisory CISCO-SA-ISE-FILE-DWNLD-SRCDNKD2 vom 2023-05-18external
- Cisco Security Advisory cisco-sa-ise-injection-sRQnsEU9 vom 2023-05-18external
- Cisco Security Advisory cisco-sa-ise-traversal-ZTUgMYhu vom 2023-05-18external
- Cisco Security Advisory cisco-sa-ise-xxe-inj-696OZTCm vom 2023-05-18external
- WID-SEC-W-2023-1243 - CSAF Versionself
- WID-SEC-2023-1243 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan