CVE-2023-20029
Cisco IOS XE Software Privilege Escalation Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cisco IOS XE Software Privilege Escalation Vulnerability
A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.
Reserved 2022-10-27 | Published 2023-03-23 | Updated 2024-10-25 | Assigner ciscosec.cloudapps.cisco.com/.../cisco-sa-iosxe-priv-esc-sABD8hcU (20230322 Cisco IOS XE Software Privilege Escalation Vulnerability)
Support options
