Vulnerabilities > CVE-2023-20258 - Unspecified vulnerability in Cisco Prime Infrastructure

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

cisco

NVD

Published: 2024-01-17

Updated: 2024-01-24

Summary

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper processing of serialized Java objects by the affected application. An attacker could exploit this vulnerability by uploading a document containing malicious serialized Java objects to be processed by the affected application. A successful exploit could allow the attacker to cause the application to execute arbitrary commands.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Prime Infrastructure - Cisco Prime Infrastructure 1.1 Cisco Prime Infrastructure 1.2 Cisco Prime Infrastructure 1.2.0 Cisco Prime Infrastructure 1.2.0.103 Cisco Prime Infrastructure 1.2.1 Cisco Prime Infrastructure 1.2.12 Cisco Prime Infrastructure 1.3 Cisco Prime Infrastructure 1.3.0 Cisco Prime Infrastructure 1.3.0.20 Cisco Prime Infrastructure 1.3.0.20-2 Cisco Prime Infrastructure 1.4 Cisco Prime Infrastructure 1.4.0 Cisco Prime Infrastructure 1.4.0.45 Cisco Prime Infrastructure 1.4.0.45-2 Cisco Prime Infrastructure 1.4.1 Cisco Prime Infrastructure 1.4.2 Cisco Prime Infrastructure 2.0 Cisco Prime Infrastructure 2.0\(4.0.45B\) Cisco Prime Infrastructure 2.0.0 Cisco Prime Infrastructure 2.0.0.0.294-2 Cisco Prime Infrastructure 2.0.0.30 Cisco Prime Infrastructure 2.1 Cisco Prime Infrastructure 2.1.0 Cisco Prime Infrastructure 2.1.1 Cisco Prime Infrastructure 2.1.2 Cisco Prime Infrastructure 2.2 Cisco Prime Infrastructure 2.2\(2\) Cisco Prime Infrastructure 2.2\(3\) Cisco Prime Infrastructure 2.2.0 Cisco Prime Infrastructure 2.2.1 Cisco Prime Infrastructure 2.2.2 Cisco Prime Infrastructure 2.2.3 Cisco Prime Infrastructure 3.0 Cisco Prime Infrastructure 3.0.0 Cisco Prime Infrastructure 3.0.1 Cisco Prime Infrastructure 3.0.2 Cisco Prime Infrastructure 3.0.3 Cisco Prime Infrastructure 3.0_Base Cisco Prime Infrastructure 3.1 Cisco Prime Infrastructure 3.1\(0.0\) Cisco Prime Infrastructure 3.1\(0.128\) Cisco Prime Infrastructure 3.1\(1\) Cisco Prime Infrastructure 3.1\(4.0\) Cisco Prime Infrastructure 3.1\(5.0\) Cisco Prime Infrastructure 3.1.0 Cisco Prime Infrastructure 3.1.1 Cisco Prime Infrastructure 3.1.3 Cisco Prime Infrastructure 3.1.4 Cisco Prime Infrastructure 3.1.5 Cisco Prime Infrastructure 3.1.6 Cisco Prime Infrastructure 3.1.7 Cisco Prime Infrastructure 3.1_Base Cisco Prime Infrastructure 3.2 Cisco Prime Infrastructure 3.2\(0.0\) Cisco Prime Infrastructure 3.2\(1.0\) Cisco Prime Infrastructure 3.2\(2.0\) Cisco Prime Infrastructure 3.2.0 Cisco Prime Infrastructure 3.2.1 Cisco Prime Infrastructure 3.2.2 Cisco Prime Infrastructure 3.2_Base Cisco Prime Infrastructure 3.3 Cisco Prime Infrastructure 3.3\(0.0\) Cisco Prime Infrastructure 3.3.1 Cisco Prime Infrastructure 3.4 Cisco Prime Infrastructure 3.4\(0.0\) Cisco Prime Infrastructure 3.4.1 Cisco Prime Infrastructure 3.4.2 Cisco Prime Infrastructure 3.5 Cisco Prime Infrastructure 3.5\(0.0\) Cisco Prime Infrastructure 3.5.1 Cisco Prime Infrastructure 3.6 Cisco Prime Infrastructure 3.7 Cisco Prime Infrastructure 3.7.1 Cisco Prime Infrastructure 3.8 Cisco Prime Infrastructure 3.8.1 Cisco Prime Infrastructure 3.9 Cisco Prime Infrastructure 3.9.1 Cisco Prime Infrastructure 3.10 Cisco Prime Infrastructure 3.10.3 Cisco Prime Infrastructure 3.10.4 Cisco Evolved Programmable Network Manager 1.1 Cisco Evolved Programmable Network Manager 1.1.2 Cisco Evolved Programmable Network Manager 1.2 Cisco Evolved Programmable Network Manager 1.2.0 Cisco Evolved Programmable Network Manager 1.2.1.3 Cisco Evolved Programmable Network Manager 1.2.200 Cisco Evolved Programmable Network Manager 1.2.300 Cisco Evolved Programmable Network Manager 1.2.400 Cisco Evolved Programmable Network Manager 1.2.500 Cisco Evolved Programmable Network Manager 1.2.600 Cisco Evolved Programmable Network Manager 1.2.700 Cisco Evolved Programmable Network Manager 2.0 Cisco Evolved Programmable Network Manager 2.0\(4.0.45B\) Cisco Evolved Programmable Network Manager 2.0\(4.0.45D\) Cisco Evolved Programmable Network Manager 2.0.1 Cisco Evolved Programmable Network Manager 2.0.2 Cisco Evolved Programmable Network Manager 2.0.3 Cisco Evolved Programmable Network Manager 2.0.4 Cisco Evolved Programmable Network Manager 2.1 Cisco Evolved Programmable Network Manager 2.1.1 Cisco Evolved Programmable Network Manager 2.1.2 Cisco Evolved Programmable Network Manager 2.1.3 Cisco Evolved Programmable Network Manager 2.2 Cisco Evolved Programmable Network Manager 2.2.1 Cisco Evolved Programmable Network Manager 3.0.0 Cisco Evolved Programmable Network Manager 3.0.1 Cisco Evolved Programmable Network Manager 3.0.2 Cisco Evolved Programmable Network Manager 3.0.3 Cisco Evolved Programmable Network Manager 3.1 Cisco Evolved Programmable Network Manager 3.1.1 Cisco Evolved Programmable Network Manager 3.1.2 Cisco Evolved Programmable Network Manager 3.1.3 Cisco Evolved Programmable Network Manager 4.0 Cisco Evolved Programmable Network Manager 4.0.1 Cisco Evolved Programmable Network Manager 4.0.2 Cisco Evolved Programmable Network Manager 4.0.3 Cisco Evolved Programmable Network Manager 4.1 Cisco Evolved Programmable Network Manager 4.1.1 Cisco Evolved Programmable Network Manager 5.0 Cisco Evolved Programmable Network Manager 5.0.1 Cisco Evolved Programmable Network Manager 5.0.2 Cisco Evolved Programmable Network Manager 5.1 Cisco Evolved Programmable Network Manager 5.1.2 Cisco Evolved Programmable Network Manager 6.0 Cisco Evolved Programmable Network Manager 7.0 Cisco Evolved Programmable Network Manager 7.0.1	132

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq