DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Identity Services Engine (ISE): Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-05-18
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen oder Dateien zu manipulieren.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20174US | medium4.9 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or cond… | ||||
| CVE-2023-20173US | medium4.9 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or cond… | ||||
| CVE-2023-20172US | medium4.9 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To expl… | ||||
| CVE-2023-20171US | medium6.5 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To expl… | ||||
| CVE-2023-20167US | medium4.9 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to eithe… | ||||
| CVE-2023-20166US | medium6.7 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to eithe… | ||||
| CVE-2023-20164US | high7.2 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and e… | ||||
| CVE-2023-20163US | high7.2 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and e… | ||||
| CVE-2023-20106US | low3.8 | — | ||
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To expl… | ||||
| CVE-2023-20087US | medium6.5 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files fro… | ||||
| CVE-2023-20077US | medium6.5 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files fro… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory Cisco-sa-ise-file-delete-read-PK5ghDDd vom 2023-05-18external
- Cisco Security Advisory CISCO-SA-ISE-FILE-DWNLD-SRCDNKD2 vom 2023-05-18external
- Cisco Security Advisory cisco-sa-ise-injection-sRQnsEU9 vom 2023-05-18external
- Cisco Security Advisory cisco-sa-ise-traversal-ZTUgMYhu vom 2023-05-18external
- Cisco Security Advisory cisco-sa-ise-xxe-inj-696OZTCm vom 2023-05-18external
- WID-SEC-W-2023-1243 - CSAF Versionself
- WID-SEC-2023-1243 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan