CVE-2023-20217

MEDIUM Year: 2023
CVSS v3 Score
5.5
Medium
Weakness Type
CWE-250
View all →

Vulnerability Description

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing certain commands using sudo. A successful exploit could allow the attacker to view arbitrary files as root on the underlying operating system. The attacker must have valid credentials on the affected device.

Related Vulnerabilities

CVE-2018-10872

MEDIUM
CVSS:5.5(Medium)

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not delive...

CWE-2502018

CVE-2020-7252

MEDIUM
CVSS:5.5(Medium)

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefull...

CWE-2502020

CVE-2021-0256

MEDIUM
CVSS:5.5(Medium)

A sensitive information disclosure vulnerability in the mosquitto message broker of Juniper Networks Junos OS may allow a locally authenticated user with shell access the ability to read portions of s...

CWE-2502021

CVE-2025-24814

MEDIUM
CVSS:5.4(Medium)

Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemConfigSetService" component (the default in "standalone" or "use...

CWE-2502025

CVE-2023-20210

MEDIUM
CVSS:6.0(Medium)

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation...

CWE-2502023

CVE-2023-37412

MEDIUM
CVSS:4.9(Medium)

IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls.

CWE-2502023