CVE-2023-20043CWE-708

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges

Medium · published January 19, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges.

This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Weakness
CWE-708 · Incorrect Ownership Assignment
Published
2023-01-19T01:36Z
EPSS history
Timeline
  • 19 JAN 01:36Z
    A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges
    cvelistv5