VULNERABILITY INTELLIGENCE

CVE-2023-20043

CVSS score6.7 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2023-01-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.

Weakness classification

  • CWE-276: Incorrect Default Permissions
  • CWE-708: Incorrect Ownership Assignment

Primary references