nvd-json-data-feeds/CVE-2023/CVE-2023-202xx/CVE-2023-20216.json

{
  "id": "CVE-2023-20216",
  "sourceIdentifier": "psirt@cisco.com",
  "published": "2023-08-03T22:15:11.647",
  "lastModified": "2024-11-21T07:40:54.493",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. \r\n\r This vulnerability is due to incorrect implementation of user role permissions. An attacker could exploit this vulnerability by authenticating to the application as a user with the BWORKS or BWSUPERADMIN role and issuing crafted commands on an affected system. A successful exploit could allow the attacker to execute commands beyond the sphere of their intended access level, including initiating installs or running operating system commands with elevated permissions.\r\n\r   There are workarounds that address this vulnerability."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "psirt@cisco.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6
      },
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "psirt@cisco.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    },
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_application_delivery_platform:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "ri.2023.05",
              "matchCriteriaId": "B793BE7B-F75A-49EC-BC39-125B8297B5C8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_application_server:*:*:*:*:-:*:*:*",
              "versionEndExcluding": "23.0.2023.05",
              "matchCriteriaId": "0E8798FA-AE5E-4602-BA91-DDC7931A16CF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_application_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "F47B0E3B-B3C6-4D62-97CE-D8A962A04B3E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_application_server:*:*:*:*:-:*:*:*",
              "versionStartIncluding": "24.0",
              "versionEndExcluding": "24.0.2023.05",
              "matchCriteriaId": "912028D4-75C6-44B0-B3B8-D709F762EB8D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_database_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "A636F068-5633-4380-BD47-2C08AC006825"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_execution_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "079DE899-0A74-4456-B21A-D3ECFE163701"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_media_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "DDFFB8B8-3486-46A0-92DF-01801731BDE5"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_network_database_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "F63F71D3-A308-4E31-9E0E-05FB851F60D9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_network_function_manager:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "22FB4FA0-B9C7-47B2-80E4-F6E989CAEDD3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_network_server:*:*:*:*:-:*:*:*",
              "versionEndExcluding": "23.0.2023.05",
              "matchCriteriaId": "5A686CE4-9A47-46DF-9281-A97543713CCB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_network_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "A3B11918-2353-4999-8AF0-23CD43DC76A7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_profile_server:*:*:*:*:-:*:*:*",
              "versionEndExcluding": "23.0.2023.05",
              "matchCriteriaId": "7ECFA9CD-1E6B-4D22-996F-700321C0B105"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_profile_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "7E976310-48CE-46C9-89B1-6EB816860D9E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_service_control_function_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "7EA87192-3BCD-444A-9160-C11315801899"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_troubleshooting_server:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.06",
              "matchCriteriaId": "25EBC8D2-8188-44B8-B42D-CF1DFDA06BC0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:-:*:*:*",
              "versionEndExcluding": "23.0.2023.05",
              "matchCriteriaId": "CC698E17-B8B6-4324-93AC-BF85108237B9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:release_independent:*:*:*",
              "versionEndExcluding": "2023.05",
              "matchCriteriaId": "65DCC22C-E4C7-49BD-944E-D1D60CB47895"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-priv-esc-qTgUZOsQ",
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-priv-esc-qTgUZOsQ",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}