Privilege escalation in Cisco DNA Center

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU73967

Risk: Medium

CVSSv4.0: 5.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-20055

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to the unintended exposure of sensitive information in the management API, which leads to security restrictions bypass and privilege escalation.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco DNA Center: 2.3.2 - 2.3.4

CPE2.3

• cpe:2.3:a:cisco_systems:cisco_dna_center:*:*:*:*:*:*:*:*
• cpe:2.3:a:cisco_systems:cisco_dna_center:2.3.2:*:*:*:*:*:*:*
• cpe:2.3:a:cisco_systems:cisco_dna_center:2.3.3:*:*:*:*:*:*:*

External links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-privesc-QFXe74RS

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.