CVE-2023-20044CWE-708

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges

Medium · published January 19, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges.

This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Weakness
CWE-708 · Incorrect Ownership Assignment
Published
2023-01-19T01:37Z
EPSS history
Timeline
  • 19 JAN 01:37Z
    A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges
    cvelistv5