CVE-2023-20029

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.

Severity	MEDIUM
CVSS	4.4
CWE	CWE-122
KEV	No
Published	3 years ago
Modified	1 year ago

Related Products

Product	Advisory	Evidence
Cisco IOS	cisco-sa-iosxe-priv-esc-sABD8hcU	Cisco OpenVuln
Cisco IOS XE Software	cisco-sa-iosxe-priv-esc-sABD8hcU	Cisco OpenVuln
Cisco Catalyst 9600 Series Switches	cisco-sa-iosxe-priv-esc-sABD8hcU	Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches	cisco-sa-iosxe-priv-esc-sABD8hcU	Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches	cisco-sa-iosxe-priv-esc-sABD8hcU	Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches	cisco-sa-iosxe-priv-esc-sABD8hcU	Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches	cisco-sa-iosxe-priv-esc-sABD8hcU	Cisco OpenVuln · software-dependent