CVE-2023-20015
Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability
Severity Score
6.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute unauthorized commands within the CLI. An attacker with Administrator privileges could also execute arbitrary commands on the underlying operating system of Cisco UCS 6400 and 6500 Series Fabric Interconnects with root-level privileges.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-10-27 CVE Reserved
- 2023-02-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6536 Search vendor "Cisco" for product "Ucs 6536" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6536 Search vendor "Cisco" for product "Ucs 6536" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6536 Search vendor "Cisco" for product "Ucs 6536" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6536 Firmware Search vendor "Cisco" for product "Ucs 6536 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6536 Search vendor "Cisco" for product "Ucs 6536" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 64108 Search vendor "Cisco" for product "Ucs 64108" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 64108 Search vendor "Cisco" for product "Ucs 64108" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 64108 Search vendor "Cisco" for product "Ucs 64108" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 64108 Firmware Search vendor "Cisco" for product "Ucs 64108 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 64108 Search vendor "Cisco" for product "Ucs 64108" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6454 Search vendor "Cisco" for product "Ucs 6454" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6454 Search vendor "Cisco" for product "Ucs 6454" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6454 Search vendor "Cisco" for product "Ucs 6454" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6454 Firmware Search vendor "Cisco" for product "Ucs 6454 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6454 Search vendor "Cisco" for product "Ucs 6454" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6200 Search vendor "Cisco" for product "Ucs 6200" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6200 Search vendor "Cisco" for product "Ucs 6200" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6200 Search vendor "Cisco" for product "Ucs 6200" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6200 Firmware Search vendor "Cisco" for product "Ucs 6200 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6200 Search vendor "Cisco" for product "Ucs 6200" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6248up Search vendor "Cisco" for product "Ucs 6248up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6248up Search vendor "Cisco" for product "Ucs 6248up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6248up Search vendor "Cisco" for product "Ucs 6248up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6248up Firmware Search vendor "Cisco" for product "Ucs 6248up Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6248up Search vendor "Cisco" for product "Ucs 6248up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6296up Search vendor "Cisco" for product "Ucs 6296up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6296up Search vendor "Cisco" for product "Ucs 6296up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6296up Search vendor "Cisco" for product "Ucs 6296up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6296up Firmware Search vendor "Cisco" for product "Ucs 6296up Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6296up Search vendor "Cisco" for product "Ucs 6296up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6300 Search vendor "Cisco" for product "Ucs 6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6300 Search vendor "Cisco" for product "Ucs 6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6300 Search vendor "Cisco" for product "Ucs 6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6300 Firmware Search vendor "Cisco" for product "Ucs 6300 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6300 Search vendor "Cisco" for product "Ucs 6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6324 Search vendor "Cisco" for product "Ucs 6324" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6324 Search vendor "Cisco" for product "Ucs 6324" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6324 Search vendor "Cisco" for product "Ucs 6324" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6324 Firmware Search vendor "Cisco" for product "Ucs 6324 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6324 Search vendor "Cisco" for product "Ucs 6324" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332 Search vendor "Cisco" for product "Ucs 6332" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332 Search vendor "Cisco" for product "Ucs 6332" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332 Search vendor "Cisco" for product "Ucs 6332" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6332 Firmware Search vendor "Cisco" for product "Ucs 6332 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332 Search vendor "Cisco" for product "Ucs 6332" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.0 < 4.0\(4o\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.0 < 4.0\(4o\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332-16up Search vendor "Cisco" for product "Ucs 6332-16up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.1 < 4.1\(3k\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.1 < 4.1\(3k\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332-16up Search vendor "Cisco" for product "Ucs 6332-16up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs Central Software Search vendor "Cisco" for product "Ucs Central Software" | >= 4.2 < 4.2\(2d\) Search vendor "Cisco" for product "Ucs Central Software" and version " >= 4.2 < 4.2\(2d\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332-16up Search vendor "Cisco" for product "Ucs 6332-16up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ucs 6332-16up Firmware Search vendor "Cisco" for product "Ucs 6332-16up Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Ucs 6332-16up Search vendor "Cisco" for product "Ucs 6332-16up" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4100 Search vendor "Cisco" for product "Firepower 4100" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4110 Search vendor "Cisco" for product "Firepower 4110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4112 Search vendor "Cisco" for product "Firepower 4112" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4115 Search vendor "Cisco" for product "Firepower 4115" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4120 Search vendor "Cisco" for product "Firepower 4120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4125 Search vendor "Cisco" for product "Firepower 4125" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4140 Search vendor "Cisco" for product "Firepower 4140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4145 Search vendor "Cisco" for product "Firepower 4145" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4150 Search vendor "Cisco" for product "Firepower 4150" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-24 Search vendor "Cisco" for product "Firepower 9300 Sm-24" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-36 Search vendor "Cisco" for product "Firepower 9300 Sm-36" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-40 Search vendor "Cisco" for product "Firepower 9300 Sm-40" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 Search vendor "Cisco" for product "Firepower 9300 Sm-44" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-44 X 3" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-48 Search vendor "Cisco" for product "Firepower 9300 Sm-48" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 Search vendor "Cisco" for product "Firepower 9300 Sm-56" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-56 X 3" | - | - |
Safe
|