cnvd - cnvd-2023-93333

cnvd-2023-93333

Vulnerability from cnvd

Title: Cisco Intersight Private Virtual Appliance命令注入漏洞

Description:

Cisco Intersight是美国思科（Cisco）公司的一个应用平台。提供了智能管理级别，使IT组织能够以比前几代工具更先进的方式分析、简化和自动化其环境。

Cisco Intersight Private Virtual Appliance存在命令注入漏洞，该漏洞源于提取上传的软件包时输入验证不足，经过身份验证的远程攻击者可利用该漏洞使用root权限执行任意命令。

Severity: 高

Patch Name: Cisco Intersight Private Virtual Appliance命令注入漏洞的补丁

Patch Description:

Cisco Intersight是美国思科（Cisco）公司的一个应用平台。提供了智能管理级别，使IT组织能够以比前几代工具更先进的方式分析、简化和自动化其环境。

Cisco Intersight Private Virtual Appliance存在命令注入漏洞，该漏洞源于提取上传的软件包时输入验证不足，经过身份验证的远程攻击者可利用该漏洞使用root权限执行任意命令。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ivpa-cmdinj-C5XRbbOy

Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-20017

Impacted products

Name
Cisco Cisco Intersight Private Virtual Appliance 1.0.9

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-20017",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-20017"
    }
  },
  "description": "Cisco Intersight\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u5e94\u7528\u5e73\u53f0\u3002\u63d0\u4f9b\u4e86\u667a\u80fd\u7ba1\u7406\u7ea7\u522b\uff0c\u4f7fIT\u7ec4\u7ec7\u80fd\u591f\u4ee5\u6bd4\u524d\u51e0\u4ee3\u5de5\u5177\u66f4\u5148\u8fdb\u7684\u65b9\u5f0f\u5206\u6790\u3001\u7b80\u5316\u548c\u81ea\u52a8\u5316\u5176\u73af\u5883\u3002\n\nCisco Intersight Private Virtual Appliance\u5b58\u5728\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63d0\u53d6\u4e0a\u4f20\u7684\u8f6f\u4ef6\u5305\u65f6\u8f93\u5165\u9a8c\u8bc1\u4e0d\u8db3\uff0c\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u7528root\u6743\u9650\u6267\u884c\u4efb\u610f\u547d\u4ee4\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ivpa-cmdinj-C5XRbbOy",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2023-93333",
  "openTime": "2023-11-30",
  "patchDescription": "Cisco Intersight\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u5e94\u7528\u5e73\u53f0\u3002\u63d0\u4f9b\u4e86\u667a\u80fd\u7ba1\u7406\u7ea7\u522b\uff0c\u4f7fIT\u7ec4\u7ec7\u80fd\u591f\u4ee5\u6bd4\u524d\u51e0\u4ee3\u5de5\u5177\u66f4\u5148\u8fdb\u7684\u65b9\u5f0f\u5206\u6790\u3001\u7b80\u5316\u548c\u81ea\u52a8\u5316\u5176\u73af\u5883\u3002\r\n\r\nCisco Intersight Private Virtual Appliance\u5b58\u5728\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63d0\u53d6\u4e0a\u4f20\u7684\u8f6f\u4ef6\u5305\u65f6\u8f93\u5165\u9a8c\u8bc1\u4e0d\u8db3\uff0c\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u7528root\u6743\u9650\u6267\u884c\u4efb\u610f\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Intersight Private Virtual Appliance\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Cisco Intersight Private Virtual Appliance 1.0.9"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2023-20017",
  "serverity": "\u9ad8",
  "submitTime": "2023-08-18",
  "title": "Cisco Intersight Private Virtual Appliance\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2023-20017 (GCVE-0-2023-20017)

Vulnerability from cvelistv5

Published

2023-08-16 21:01

Modified

2024-08-02 08:57

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Summary

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities. These vulnerabilities are due to insufficient input validation when extracting uploaded software packages. An attacker could exploit these vulnerabilities by authenticating to an affected device and uploading a crafted software package. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.

References

▼	URL	Tags
	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ivpa-cmdinj-C5XRbbOy

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Intersight Virtual Appliance	Version: 1.0.9-113 Version: 1.0.9-148 Version: 1.0.9-230 Version: 1.0.9-53 Version: 1.0.9-7 Version: 1.0.9-197 Version: 1.0.9-170 Version: 1.0.9-149 Version: 1.0.9-278 Version: 1.0.9-184 Version: 1.0.9-232 Version: 1.0.9-83 Version: 1.0.9-90 Version: 1.0.9-97 Version: 1.0.9-125 Version: 1.0.9-250 Version: 1.0.9-77 Version: 1.0.9-133 Version: 1.0.9-67 Version: 1.0.9-214 Version: 1.0.9-103 Version: 1.0.9-266 Version: 1.0.9-13 Version: 1.0.9-164 Version: 1.0.9-292 Version: 1.0.9-302 Version: 1.0.9-319 Version: 1.0.9-343 Version: 1.0.9-360 Version: 1.0.9-361 Version: 1.0.9-378 Version: 1.0.9-389 Version: 1.0.9-402 Version: 1.0.9-428 Version: 1.0.9-442 Version: 1.0.9-456

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:57:35.562Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-ivpa-cmdinj-C5XRbbOy",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ivpa-cmdinj-C5XRbbOy"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Intersight Virtual Appliance",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.9-113"
            },
            {
              "status": "affected",
              "version": "1.0.9-148"
            },
            {
              "status": "affected",
              "version": "1.0.9-230"
            },
            {
              "status": "affected",
              "version": "1.0.9-53"
            },
            {
              "status": "affected",
              "version": "1.0.9-7"
            },
            {
              "status": "affected",
              "version": "1.0.9-197"
            },
            {
              "status": "affected",
              "version": "1.0.9-170"
            },
            {
              "status": "affected",
              "version": "1.0.9-149"
            },
            {
              "status": "affected",
              "version": "1.0.9-278"
            },
            {
              "status": "affected",
              "version": "1.0.9-184"
            },
            {
              "status": "affected",
              "version": "1.0.9-232"
            },
            {
              "status": "affected",
              "version": "1.0.9-83"
            },
            {
              "status": "affected",
              "version": "1.0.9-90"
            },
            {
              "status": "affected",
              "version": "1.0.9-97"
            },
            {
              "status": "affected",
              "version": "1.0.9-125"
            },
            {
              "status": "affected",
              "version": "1.0.9-250"
            },
            {
              "status": "affected",
              "version": "1.0.9-77"
            },
            {
              "status": "affected",
              "version": "1.0.9-133"
            },
            {
              "status": "affected",
              "version": "1.0.9-67"
            },
            {
              "status": "affected",
              "version": "1.0.9-214"
            },
            {
              "status": "affected",
              "version": "1.0.9-103"
            },
            {
              "status": "affected",
              "version": "1.0.9-266"
            },
            {
              "status": "affected",
              "version": "1.0.9-13"
            },
            {
              "status": "affected",
              "version": "1.0.9-164"
            },
            {
              "status": "affected",
              "version": "1.0.9-292"
            },
            {
              "status": "affected",
              "version": "1.0.9-302"
            },
            {
              "status": "affected",
              "version": "1.0.9-319"
            },
            {
              "status": "affected",
              "version": "1.0.9-343"
            },
            {
              "status": "affected",
              "version": "1.0.9-360"
            },
            {
              "status": "affected",
              "version": "1.0.9-361"
            },
            {
              "status": "affected",
              "version": "1.0.9-378"
            },
            {
              "status": "affected",
              "version": "1.0.9-389"
            },
            {
              "status": "affected",
              "version": "1.0.9-402"
            },
            {
              "status": "affected",
              "version": "1.0.9-428"
            },
            {
              "status": "affected",
              "version": "1.0.9-442"
            },
            {
              "status": "affected",
              "version": "1.0.9-456"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities.\r\n\r These vulnerabilities are due to insufficient input validation when extracting uploaded software packages. An attacker could exploit these vulnerabilities by authenticating to an affected device and uploading a crafted software package. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of these vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-25T16:57:31.634Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ivpa-cmdinj-C5XRbbOy",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ivpa-cmdinj-C5XRbbOy"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ivpa-cmdinj-C5XRbbOy",
        "defects": [
          "CSCwc35166"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2023-20017",
    "datePublished": "2023-08-16T21:01:28.215Z",
    "dateReserved": "2022-10-27T18:47:50.308Z",
    "dateUpdated": "2024-08-02T08:57:35.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted