Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method used for the backup function. An attacker could exploit this vulnerability by leveraging a static key used for the backup configuration feature. A successful exploit could allow the attacker to decrypt sensitive information that is stored in full state and configuration backup files, such as local user credentials, authentication server passwords, Simple Network Management Protocol (SNMP) community names, and other credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the February 2023 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: February 2023 Semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75057"].
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20016US | medium6.5OT elevated | — | ||
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated atta… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- Security Impact Rating (SIR)external
- considering software upgradesexternal
- Cisco Software Checkerexternal
- Cisco Event Response: February 2023 Semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publicationexternal
- Cisco Security Advisories pageexternal
remediations (87)
- FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.63 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.63 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.66 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.66 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.70 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.70 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.101 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.101 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.148 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.148 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.149 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.149 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.17 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.17 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.19 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.19 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.24 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.24 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.26 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.26 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.28 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.28 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.54 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.54 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.60 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.60 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.71 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.71 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.83 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.83 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.86 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.86 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.91 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.91 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.97 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.97 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.110 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.110 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.130 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.130 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.144 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.144 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.145 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.145 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.155 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.155 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.166 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.166 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.173 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.173 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.179 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.179 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.180 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.180 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.190 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.190 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.215 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.215 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.216 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.216 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.219 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.219 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.230 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.230 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.56 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.56 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.58 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.58 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.66 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.66 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.73 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.73 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.75 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.75 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.91 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.91 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.93 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.93 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.99 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.99 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Unified Computing System (Managed)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan