A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.
This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
16 Oct 2023, 18:07
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:cisco:catalyst_ir1835-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-ncp-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8140h-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-ncp-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-ncp-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1101:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1833-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-con-a:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8340-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-con-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-con-a:-:*:*:*:*:*:*:* cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-con-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir8140h-p-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1831-k9:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ess-3300-24t-ncp-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_ir1821-k9:-:*:*:*:*:*:*:* |
|
| First Time |
Cisco catalyst Ir1821-k9
Cisco catalyst Ir8140h-p-k9 Cisco catalyst Ir1835-k9 Cisco catalyst Ie3300 Rugged Switch Cisco Cisco catalyst Ir1101 Cisco ess-3300-24t-ncp-e Cisco ess-3300-ncp-a Cisco catalyst Ir8140h-k9 Cisco catalyst Ie3400 Rugged Switch Cisco ess-3300-24t-ncp-a Cisco catalyst Ir1833-k9 Cisco ess-3300-24t-con-e Cisco ess-3300-24t-con-a Cisco ess-3300-con-a Cisco catalyst Ie3200 Rugged Switch Cisco ios Xe Cisco ess-3300-con-e Cisco catalyst Ir8340-k9 Cisco catalyst Ir1831-k9 Cisco ess-3300-ncp-e |
|
| CWE | CWE-269 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | (MISC) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn - Vendor Advisory |
04 Oct 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-04 17:15
Updated : 2024-11-21 07:40
NVD link : CVE-2023-20235
Mitre link : CVE-2023-20235
CVE.ORG link : CVE-2023-20235
JSON object : View
Products Affected
cisco
- ess-3300-ncp-e
- catalyst_ir1101
- catalyst_ir8140h-k9
- ess-3300-24t-con-a
- ios_xe
- catalyst_ir8140h-p-k9
- catalyst_ir8340-k9
- catalyst_ie3400_rugged_switch
- catalyst_ir1821-k9
- catalyst_ie3200_rugged_switch
- ess-3300-24t-con-e
- ess-3300-24t-ncp-e
- ess-3300-24t-ncp-a
- ess-3300-con-e
- ess-3300-con-a
- catalyst_ie3300_rugged_switch
- catalyst_ir1833-k9
- ess-3300-ncp-a
- catalyst_ir1835-k9
- catalyst_ir1831-k9