CVE-2023-20012
Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability
Severity Score
4.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
A vulnerability in the CLI console login authentication of Cisco Nexus 9300-FX3 Series Fabric Extender (FEX) when used in UCS Fabric Interconnect deployments could allow an unauthenticated attacker with physical access to bypass authentication. This vulnerability is due to the improper implementation of the password validation function. An attacker could exploit this vulnerability by logging in to the console port on an affected device. A successful exploit could allow the attacker to bypass authentication and execute a limited set of commands local to the FEX, which could cause a device reboot and denial of service (DoS) condition.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-10-27 CVE Reserved
- 2023-02-23 CVE Published
- 2024-08-05 EPSS Updated
- 2024-10-25 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Nexus 93180yc-fx3s Firmware Search vendor "Cisco" for product "Nexus 93180yc-fx3s Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 93180yc-fx3s Search vendor "Cisco" for product "Nexus 93180yc-fx3s" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nexus 93180yc-fx3 Firmware Search vendor "Cisco" for product "Nexus 93180yc-fx3 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 93180yc-fx3 Search vendor "Cisco" for product "Nexus 93180yc-fx3" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6536 Search vendor "Cisco" for product "Ucs 6536" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6536 Firmware Search vendor "Cisco" for product "Ucs 6536 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6536 Search vendor "Cisco" for product "Ucs 6536" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 64108 Search vendor "Cisco" for product "Ucs 64108" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 64108 Firmware Search vendor "Cisco" for product "Ucs 64108 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 64108 Search vendor "Cisco" for product "Ucs 64108" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6454 Search vendor "Cisco" for product "Ucs 6454" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6454 Firmware Search vendor "Cisco" for product "Ucs 6454 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6454 Search vendor "Cisco" for product "Ucs 6454" | - | - |
Safe
|