Description
A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.

This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
Published: 2023-10-04
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-24414 A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
History

Fri, 27 Feb 2026 03:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Cisco Catalyst Ie3200 Rugged Switch Catalyst Ie3300 Rugged Switch Catalyst Ie3400 Rugged Switch Catalyst Ir1101 Catalyst Ir1821-k9 Catalyst Ir1831-k9 Catalyst Ir1833-k9 Catalyst Ir1835-k9 Catalyst Ir8140h-k9 Catalyst Ir8140h-p-k9 Catalyst Ir8340-k9 Ess-3300-24t-con-a Ess-3300-24t-con-e Ess-3300-24t-ncp-a Ess-3300-24t-ncp-e Ess-3300-con-a Ess-3300-con-e Ess-3300-ncp-a Ess-3300-ncp-e Ios Xe
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-02-25T17:20:09.150Z

Reserved: 2022-10-27T18:47:50.369Z

Link: CVE-2023-20235

cve-icon Vulnrichment

Updated: 2024-08-02T09:05:36.672Z

cve-icon NVD

Status : Modified

Published: 2023-10-04T17:15:09.917

Modified: 2024-11-21T07:40:57.567

Link: CVE-2023-20235

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses