CVE-2023-20236 - Vulnerability Details

Vendors	Products
Cisco	8201 8202 8208 8212 8218 8804 8808 8812 8818 8831 Asr 9000 Asr 9000v Asr 9001 Asr 9006 Asr 9010 Asr 9901 Asr 9902 Asr 9903 Asr 9904 Asr 9906 Asr 9910 Asr 9912 Asr 9920 Asr 9922 Ios Xr Ios Xr Software Ncs 1001 Ncs 1002 Ncs 1004 Ncs 4009 Ncs 4016 Ncs 4201 Ncs 4202 Ncs 4206 Ncs 4216 Ncs 5001 Ncs 5002 Ncs 5011 Ncs 540 Ncs 5500 Ncs 5501 Ncs 5502 Ncs 5504 Ncs 5508 Ncs 5516 Ncs 560 Ncs 560-4 Ncs 560-7 Ncs 57b1-5dse-sys Ncs 57b1-6d24-sys Ncs 57c1-48q6-sys Ncs 57c3-mod-sys Ncs 57c3-mods-sys

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB

Type	Values Removed	Values Added
First Time appeared		Cisco ios Xr Software
CPEs		cpe:2.3:o:cisco:ios_xr_software::::::::
Vendors & Products		Cisco ios Xr Software
Metrics		ssvc `{'options': {'Automatable': 'No', 'Exploitation': 'None', 'Technical Impact': 'Total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-20236", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2022-10-27T18:47:50.370Z", "datePublished": "2023-09-13T16:39:19.418Z", "dateUpdated": "2024-10-23T19:10:48.388Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-08-07T19:50:10.951Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device.\r\n\r This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device."}], "affected": [{"vendor": "Cisco", "product": "Cisco IOS XR Software", "versions": [{"version": "5.2.0", "status": "affected"}, {"version": "5.2.1", "status": "affected"}, {"version": "5.2.2", "status": "affected"}, {"version": "5.2.4", "status": "affected"}, {"version": "5.2.3", "status": "affected"}, {"version": "5.2.5", "status": "affected"}, {"version": "5.2.47", "status": "affected"}, {"version": "5.3.0", "status": "affected"}, {"version": "5.3.1", "status": "affected"}, {"version": "5.3.2", "status": "affected"}, {"version": "5.3.3", "status": "affected"}, {"version": "5.3.4", "status": "affected"}, {"version": "6.0.0", "status": "affected"}, {"version": "6.0.1", "status": "affected"}, {"version": "6.0.2", "status": "affected"}, {"version": "6.1.1", "status": "affected"}, {"version": "6.1.2", "status": "affected"}, {"version": "6.1.3", "status": "affected"}, {"version": "6.1.4", "status": "affected"}, {"version": "6.1.12", "status": "affected"}, {"version": "6.1.22", "status": "affected"}, {"version": "6.1.32", "status": "affected"}, {"version": "6.1.36", "status": "affected"}, {"version": "6.1.42", "status": "affected"}, {"version": "6.2.1", "status": "affected"}, {"version": "6.2.2", "status": "affected"}, {"version": "6.2.3", "status": "affected"}, {"version": "6.2.25", "status": "affected"}, {"version": "6.2.11", "status": "affected"}, {"version": "6.3.2", "status": "affected"}, {"version": "6.3.3", "status": "affected"}, {"version": "6.3.15", "status": "affected"}, {"version": "6.4.1", "status": "affected"}, {"version": "6.4.2", "status": "affected"}, {"version": "6.4.3", "status": "affected"}, {"version": "6.5.1", "status": "affected"}, {"version": "6.5.2", "status": "affected"}, {"version": "6.5.3", "status": "affected"}, {"version": "6.5.25", "status": "affected"}, {"version": "6.5.26", "status": "affected"}, {"version": "6.5.28", "status": "affected"}, {"version": "6.5.29", "status": "affected"}, {"version": "6.5.32", "status": "affected"}, {"version": "6.5.33", "status": "affected"}, {"version": "6.6.2", "status": "affected"}, {"version": "6.6.3", "status": "affected"}, {"version": "6.6.25", "status": "affected"}, {"version": "6.6.4", "status": "affected"}, {"version": "7.0.1", "status": "affected"}, {"version": "7.0.2", "status": "affected"}, {"version": "7.0.12", "status": "affected"}, {"version": "7.0.14", "status": "affected"}, {"version": "7.1.1", "status": "affected"}, {"version": "7.1.15", "status": "affected"}, {"version": "7.1.2", "status": "affected"}, {"version": "7.1.3", "status": "affected"}, {"version": "6.7.1", "status": "affected"}, {"version": "6.7.2", "status": "affected"}, {"version": "6.7.3", "status": "affected"}, {"version": "6.7.4", "status": "affected"}, {"version": "7.2.0", "status": "affected"}, {"version": "7.2.1", "status": "affected"}, {"version": "7.2.2", "status": "affected"}, {"version": "7.3.1", "status": "affected"}, {"version": "7.3.15", "status": "affected"}, {"version": "7.3.2", "status": "affected"}, {"version": "7.3.3", "status": "affected"}, {"version": "7.3.5", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.4.2", "status": "affected"}, {"version": "6.8.1", "status": "affected"}, {"version": "6.8.2", "status": "affected"}, {"version": "7.5.1", "status": "affected"}, {"version": "7.5.3", "status": "affected"}, {"version": "7.5.2", "status": "affected"}, {"version": "7.5.4", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.7.1", "status": "affected"}, {"version": "7.7.2", "status": "affected"}, {"version": "7.7.21", "status": "affected"}, {"version": "6.9.1", "status": "affected"}, {"version": "6.9.2", "status": "affected"}, {"version": "7.8.1", "status": "affected"}, {"version": "7.8.2", "status": "affected"}, {"version": "7.9.1", "status": "affected"}, {"version": "7.9.2", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Verification of Cryptographic Signature", "type": "cwe", "cweId": "CWE-347"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "name": "cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "discovery": "INTERNAL", "defects": ["CSCvz63925", "CSCvz63918", "CSCwe12502", "CSCvz63929", "CSCwi31568", "CSCwh78724", "CSCwi26526", "CSCwh70601", "CSCwh78727", "CSCwj83430", "CSCwj88475"]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:05:35.905Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "name": "cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "cisco", "product": "ios_xr_software", "cpes": ["cpe:2.3:o:cisco:ios_xr_software:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "7.9.2", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2023-11-15T16:36:16.200980Z", "id": "CVE-2023-20236", "options": [{"Exploitation": "None"}, {"Automatable": "No"}, {"Technical Impact": "Total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-23T19:10:48.388Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-20236 (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

state : PUBLISHED (string)

assignerShortName : cisco (string)

dateReserved : 2022-10-27T18:47:50.370Z (string)

datePublished : 2023-09-13T16:39:19.418Z (string)

dateUpdated : 2024-10-23T19:10:48.388Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2024-08-07T19:50:10.951Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device. (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco IOS XR Software (string)

versions : [ »

0 : { »

version : 5.2.0 (string)

status : affected (string)

}

1 : { »

version : 5.2.1 (string)

status : affected (string)

}

2 : { »

version : 5.2.2 (string)

status : affected (string)

}

3 : { »

version : 5.2.4 (string)

status : affected (string)

}

4 : { »

version : 5.2.3 (string)

status : affected (string)

}

5 : { »

version : 5.2.5 (string)

status : affected (string)

}

6 : { »

version : 5.2.47 (string)

status : affected (string)

}

7 : { »

version : 5.3.0 (string)

status : affected (string)

}

8 : { »

version : 5.3.1 (string)

status : affected (string)

}

9 : { »

version : 5.3.2 (string)

status : affected (string)

}

10 : { »

version : 5.3.3 (string)

status : affected (string)

}

11 : { »

version : 5.3.4 (string)

status : affected (string)

}

12 : { »

version : 6.0.0 (string)

status : affected (string)

}

13 : { »

version : 6.0.1 (string)

status : affected (string)

}

14 : { »

version : 6.0.2 (string)

status : affected (string)

}

15 : { »

version : 6.1.1 (string)

status : affected (string)

}

16 : { »

version : 6.1.2 (string)

status : affected (string)

}

17 : { »

version : 6.1.3 (string)

status : affected (string)

}

18 : { »

version : 6.1.4 (string)

status : affected (string)

}

19 : { »

version : 6.1.12 (string)

status : affected (string)

}

20 : { »

version : 6.1.22 (string)

status : affected (string)

}

21 : { »

version : 6.1.32 (string)

status : affected (string)

}

22 : { »

version : 6.1.36 (string)

status : affected (string)

}

23 : { »

version : 6.1.42 (string)

status : affected (string)

}

24 : { »

version : 6.2.1 (string)

status : affected (string)

}

25 : { »

version : 6.2.2 (string)

status : affected (string)

}

26 : { »

version : 6.2.3 (string)

status : affected (string)

}

27 : { »

version : 6.2.25 (string)

status : affected (string)

}

28 : { »

version : 6.2.11 (string)

status : affected (string)

}

29 : { »

version : 6.3.2 (string)

status : affected (string)

}

30 : { »

version : 6.3.3 (string)

status : affected (string)

}

31 : { »

version : 6.3.15 (string)

status : affected (string)

}

32 : { »

version : 6.4.1 (string)

status : affected (string)

}

33 : { »

version : 6.4.2 (string)

status : affected (string)

}

34 : { »

version : 6.4.3 (string)

status : affected (string)

}

35 : { »

version : 6.5.1 (string)

status : affected (string)

}

36 : { »

version : 6.5.2 (string)

status : affected (string)

}

37 : { »

version : 6.5.3 (string)

status : affected (string)

}

38 : { »

version : 6.5.25 (string)

status : affected (string)

}

39 : { »

version : 6.5.26 (string)

status : affected (string)

}

40 : { »

version : 6.5.28 (string)

status : affected (string)

}

41 : { »

version : 6.5.29 (string)

status : affected (string)

}

42 : { »

version : 6.5.32 (string)

status : affected (string)

}

43 : { »

version : 6.5.33 (string)

status : affected (string)

}

44 : { »

version : 6.6.2 (string)

status : affected (string)

}

45 : { »

version : 6.6.3 (string)

status : affected (string)

}

46 : { »

version : 6.6.25 (string)

status : affected (string)

}

47 : { »

version : 6.6.4 (string)

status : affected (string)

}

48 : { »

version : 7.0.1 (string)

status : affected (string)

}

49 : { »

version : 7.0.2 (string)

status : affected (string)

}

50 : { »

version : 7.0.12 (string)

status : affected (string)

}

51 : { »

version : 7.0.14 (string)

status : affected (string)

}

52 : { »

version : 7.1.1 (string)

status : affected (string)

}

53 : { »

version : 7.1.15 (string)

status : affected (string)

}

54 : { »

version : 7.1.2 (string)

status : affected (string)

}

55 : { »

version : 7.1.3 (string)

status : affected (string)

}

56 : { »

version : 6.7.1 (string)

status : affected (string)

}

57 : { »

version : 6.7.2 (string)

status : affected (string)

}

58 : { »

version : 6.7.3 (string)

status : affected (string)

}

59 : { »

version : 6.7.4 (string)

status : affected (string)

}

60 : { »

version : 7.2.0 (string)

status : affected (string)

}

61 : { »

version : 7.2.1 (string)

status : affected (string)

}

62 : { »

version : 7.2.2 (string)

status : affected (string)

}

63 : { »

version : 7.3.1 (string)

status : affected (string)

}

64 : { »

version : 7.3.15 (string)

status : affected (string)

}

65 : { »

version : 7.3.2 (string)

status : affected (string)

}

66 : { »

version : 7.3.3 (string)

status : affected (string)

}

67 : { »

version : 7.3.5 (string)

status : affected (string)

}

68 : { »

version : 7.4.1 (string)

status : affected (string)

}

69 : { »

version : 7.4.2 (string)

status : affected (string)

}

70 : { »

version : 6.8.1 (string)

status : affected (string)

}

71 : { »

version : 6.8.2 (string)

status : affected (string)

}

72 : { »

version : 7.5.1 (string)

status : affected (string)

}

73 : { »

version : 7.5.3 (string)

status : affected (string)

}

74 : { »

version : 7.5.2 (string)

status : affected (string)

}

75 : { »

version : 7.5.4 (string)

status : affected (string)

}

76 : { »

version : 7.6.1 (string)

status : affected (string)

}

77 : { »

version : 7.6.2 (string)

status : affected (string)

}

78 : { »

version : 7.7.1 (string)

status : affected (string)

}

79 : { »

version : 7.7.2 (string)

status : affected (string)

}

80 : { »

version : 7.7.21 (string)

status : affected (string)

}

81 : { »

version : 6.9.1 (string)

status : affected (string)

}

82 : { »

version : 6.9.2 (string)

status : affected (string)

}

83 : { »

version : 7.8.1 (string)

status : affected (string)

}

84 : { »

version : 7.8.2 (string)

status : affected (string)

}

85 : { »

version : 7.9.1 (string)

status : affected (string)

}

86 : { »

version : 7.9.2 (string)

status : affected (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : Improper Verification of Cryptographic Signature (string)

type : cwe (string)

cweId : CWE-347 (string)

}

]

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

name : cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

}

]

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : HIGH (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

source : { »

advisory : cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

discovery : INTERNAL (string)

defects : [ »

0 : CSCvz63925 (string)

1 : CSCvz63918 (string)

2 : CSCwe12502 (string)

3 : CSCvz63929 (string)

4 : CSCwi31568 (string)

5 : CSCwh78724 (string)

6 : CSCwi26526 (string)

7 : CSCwh70601 (string)

8 : CSCwh78727 (string)

9 : CSCwj83430 (string)

10 : CSCwj88475 (string)

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T09:05:35.905Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

name : cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

affected : [ »

0 : { »

vendor : cisco (string)

product : ios_xr_software (string)

cpes : [ »

0 : cpe:2.3:o:cisco:ios_xr_software:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 7.9.2 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2023-11-15T16:36:16.200980Z (string)

id : CVE-2023-20236 (string)

options : [ »

0 : { »

Exploitation : None (string)

}

1 : { »

Automatable : No (string)

}

2 : { »

Technical Impact : Total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-23T19:10:48.388Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "name": "cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:05:35.905Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-20236", "role": "CISA Coordinator", "options": [{"Exploitation": "None"}, {"Automatable": "No"}, {"Technical Impact": "Total"}], "version": "2.0.3", "timestamp": "2023-11-15T16:36:16.200980Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:cisco:ios_xr_software:*:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "ios_xr_software", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.9.2"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-23T19:09:16.701Z"}}], "cna": {"source": {"defects": ["CSCvz63925", "CSCvz63918", "CSCwe12502", "CSCvz63929", "CSCwi31568", "CSCwh78724", "CSCwi26526", "CSCwh70601", "CSCwh78727", "CSCwj83430", "CSCwj88475"], "advisory": "cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco IOS XR Software", "versions": [{"status": "affected", "version": "5.2.0"}, {"status": "affected", "version": "5.2.1"}, {"status": "affected", "version": "5.2.2"}, {"status": "affected", "version": "5.2.4"}, {"status": "affected", "version": "5.2.3"}, {"status": "affected", "version": "5.2.5"}, {"status": "affected", "version": "5.2.47"}, {"status": "affected", "version": "5.3.0"}, {"status": "affected", "version": "5.3.1"}, {"status": "affected", "version": "5.3.2"}, {"status": "affected", "version": "5.3.3"}, {"status": "affected", "version": "5.3.4"}, {"status": "affected", "version": "6.0.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.1.1"}, {"status": "affected", "version": "6.1.2"}, {"status": "affected", "version": "6.1.3"}, {"status": "affected", "version": "6.1.4"}, {"status": "affected", "version": "6.1.12"}, {"status": "affected", "version": "6.1.22"}, {"status": "affected", "version": "6.1.32"}, {"status": "affected", "version": "6.1.36"}, {"status": "affected", "version": "6.1.42"}, {"status": "affected", "version": "6.2.1"}, {"status": "affected", "version": "6.2.2"}, {"status": "affected", "version": "6.2.3"}, {"status": "affected", "version": "6.2.25"}, {"status": "affected", "version": "6.2.11"}, {"status": "affected", "version": "6.3.2"}, {"status": "affected", "version": "6.3.3"}, {"status": "affected", "version": "6.3.15"}, {"status": "affected", "version": "6.4.1"}, {"status": "affected", "version": "6.4.2"}, {"status": "affected", "version": "6.4.3"}, {"status": "affected", "version": "6.5.1"}, {"status": "affected", "version": "6.5.2"}, {"status": "affected", "version": "6.5.3"}, {"status": "affected", "version": "6.5.25"}, {"status": "affected", "version": "6.5.26"}, {"status": "affected", "version": "6.5.28"}, {"status": "affected", "version": "6.5.29"}, {"status": "affected", "version": "6.5.32"}, {"status": "affected", "version": "6.5.33"}, {"status": "affected", "version": "6.6.2"}, {"status": "affected", "version": "6.6.3"}, {"status": "affected", "version": "6.6.25"}, {"status": "affected", "version": "6.6.4"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.0.12"}, {"status": "affected", "version": "7.0.14"}, {"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.1.15"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "6.7.1"}, {"status": "affected", "version": "6.7.2"}, {"status": "affected", "version": "6.7.3"}, {"status": "affected", "version": "6.7.4"}, {"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.3.15"}, {"status": "affected", "version": "7.3.2"}, {"status": "affected", "version": "7.3.3"}, {"status": "affected", "version": "7.3.5"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "6.8.1"}, {"status": "affected", "version": "6.8.2"}, {"status": "affected", "version": "7.5.1"}, {"status": "affected", "version": "7.5.3"}, {"status": "affected", "version": "7.5.2"}, {"status": "affected", "version": "7.5.4"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.1"}, {"status": "affected", "version": "7.7.2"}, {"status": "affected", "version": "7.7.21"}, {"status": "affected", "version": "6.9.1"}, {"status": "affected", "version": "6.9.2"}, {"status": "affected", "version": "7.8.1"}, {"status": "affected", "version": "7.8.2"}, {"status": "affected", "version": "7.9.1"}, {"status": "affected", "version": "7.9.2"}]}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB", "name": "cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device.\r\n\r This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-347", "description": "Improper Verification of Cryptographic Signature"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-08-07T19:50:10.951Z"}}}, "cveMetadata": {"cveId": "CVE-2023-20236", "state": "PUBLISHED", "dateUpdated": "2024-10-23T19:10:48.388Z", "dateReserved": "2022-10-27T18:47:50.370Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2023-09-13T16:39:19.418Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

name : cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T09:05:35.905Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-20236 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : None (string)

}

1 : { »

Automatable : No (string)

}

2 : { »

Technical Impact : Total (string)

}

]

version : 2.0.3 (string)

timestamp : 2023-11-15T16:36:16.200980Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:o:cisco:ios_xr_software:*:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : ios_xr_software (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 7.9.2 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-23T19:09:16.701Z (string)

}

]

cna : { »

source : { »

defects : [ »

0 : CSCvz63925 (string)

1 : CSCvz63918 (string)

2 : CSCwe12502 (string)

3 : CSCvz63929 (string)

4 : CSCwi31568 (string)

5 : CSCwh78724 (string)

6 : CSCwi26526 (string)

7 : CSCwh70601 (string)

8 : CSCwh78727 (string)

9 : CSCwj83430 (string)

10 : CSCwj88475 (string)

]

advisory : cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

discovery : INTERNAL (string)

}

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.7 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : HIGH (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco IOS XR Software (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.2.0 (string)

}

1 : { »

status : affected (string)

version : 5.2.1 (string)

}

2 : { »

status : affected (string)

version : 5.2.2 (string)

}

3 : { »

status : affected (string)

version : 5.2.4 (string)

}

4 : { »

status : affected (string)

version : 5.2.3 (string)

}

5 : { »

status : affected (string)

version : 5.2.5 (string)

}

6 : { »

status : affected (string)

version : 5.2.47 (string)

}

7 : { »

status : affected (string)

version : 5.3.0 (string)

}

8 : { »

status : affected (string)

version : 5.3.1 (string)

}

9 : { »

status : affected (string)

version : 5.3.2 (string)

}

10 : { »

status : affected (string)

version : 5.3.3 (string)

}

11 : { »

status : affected (string)

version : 5.3.4 (string)

}

12 : { »

status : affected (string)

version : 6.0.0 (string)

}

13 : { »

status : affected (string)

version : 6.0.1 (string)

}

14 : { »

status : affected (string)

version : 6.0.2 (string)

}

15 : { »

status : affected (string)

version : 6.1.1 (string)

}

16 : { »

status : affected (string)

version : 6.1.2 (string)

}

17 : { »

status : affected (string)

version : 6.1.3 (string)

}

18 : { »

status : affected (string)

version : 6.1.4 (string)

}

19 : { »

status : affected (string)

version : 6.1.12 (string)

}

20 : { »

status : affected (string)

version : 6.1.22 (string)

}

21 : { »

status : affected (string)

version : 6.1.32 (string)

}

22 : { »

status : affected (string)

version : 6.1.36 (string)

}

23 : { »

status : affected (string)

version : 6.1.42 (string)

}

24 : { »

status : affected (string)

version : 6.2.1 (string)

}

25 : { »

status : affected (string)

version : 6.2.2 (string)

}

26 : { »

status : affected (string)

version : 6.2.3 (string)

}

27 : { »

status : affected (string)

version : 6.2.25 (string)

}

28 : { »

status : affected (string)

version : 6.2.11 (string)

}

29 : { »

status : affected (string)

version : 6.3.2 (string)

}

30 : { »

status : affected (string)

version : 6.3.3 (string)

}

31 : { »

status : affected (string)

version : 6.3.15 (string)

}

32 : { »

status : affected (string)

version : 6.4.1 (string)

}

33 : { »

status : affected (string)

version : 6.4.2 (string)

}

34 : { »

status : affected (string)

version : 6.4.3 (string)

}

35 : { »

status : affected (string)

version : 6.5.1 (string)

}

36 : { »

status : affected (string)

version : 6.5.2 (string)

}

37 : { »

status : affected (string)

version : 6.5.3 (string)

}

38 : { »

status : affected (string)

version : 6.5.25 (string)

}

39 : { »

status : affected (string)

version : 6.5.26 (string)

}

40 : { »

status : affected (string)

version : 6.5.28 (string)

}

41 : { »

status : affected (string)

version : 6.5.29 (string)

}

42 : { »

status : affected (string)

version : 6.5.32 (string)

}

43 : { »

status : affected (string)

version : 6.5.33 (string)

}

44 : { »

status : affected (string)

version : 6.6.2 (string)

}

45 : { »

status : affected (string)

version : 6.6.3 (string)

}

46 : { »

status : affected (string)

version : 6.6.25 (string)

}

47 : { »

status : affected (string)

version : 6.6.4 (string)

}

48 : { »

status : affected (string)

version : 7.0.1 (string)

}

49 : { »

status : affected (string)

version : 7.0.2 (string)

}

50 : { »

status : affected (string)

version : 7.0.12 (string)

}

51 : { »

status : affected (string)

version : 7.0.14 (string)

}

52 : { »

status : affected (string)

version : 7.1.1 (string)

}

53 : { »

status : affected (string)

version : 7.1.15 (string)

}

54 : { »

status : affected (string)

version : 7.1.2 (string)

}

55 : { »

status : affected (string)

version : 7.1.3 (string)

}

56 : { »

status : affected (string)

version : 6.7.1 (string)

}

57 : { »

status : affected (string)

version : 6.7.2 (string)

}

58 : { »

status : affected (string)

version : 6.7.3 (string)

}

59 : { »

status : affected (string)

version : 6.7.4 (string)

}

60 : { »

status : affected (string)

version : 7.2.0 (string)

}

61 : { »

status : affected (string)

version : 7.2.1 (string)

}

62 : { »

status : affected (string)

version : 7.2.2 (string)

}

63 : { »

status : affected (string)

version : 7.3.1 (string)

}

64 : { »

status : affected (string)

version : 7.3.15 (string)

}

65 : { »

status : affected (string)

version : 7.3.2 (string)

}

66 : { »

status : affected (string)

version : 7.3.3 (string)

}

67 : { »

status : affected (string)

version : 7.3.5 (string)

}

68 : { »

status : affected (string)

version : 7.4.1 (string)

}

69 : { »

status : affected (string)

version : 7.4.2 (string)

}

70 : { »

status : affected (string)

version : 6.8.1 (string)

}

71 : { »

status : affected (string)

version : 6.8.2 (string)

}

72 : { »

status : affected (string)

version : 7.5.1 (string)

}

73 : { »

status : affected (string)

version : 7.5.3 (string)

}

74 : { »

status : affected (string)

version : 7.5.2 (string)

}

75 : { »

status : affected (string)

version : 7.5.4 (string)

}

76 : { »

status : affected (string)

version : 7.6.1 (string)

}

77 : { »

status : affected (string)

version : 7.6.2 (string)

}

78 : { »

status : affected (string)

version : 7.7.1 (string)

}

79 : { »

status : affected (string)

version : 7.7.2 (string)

}

80 : { »

status : affected (string)

version : 7.7.21 (string)

}

81 : { »

status : affected (string)

version : 6.9.1 (string)

}

82 : { »

status : affected (string)

version : 6.9.2 (string)

}

83 : { »

status : affected (string)

version : 7.8.1 (string)

}

84 : { »

status : affected (string)

version : 7.8.2 (string)

}

85 : { »

status : affected (string)

version : 7.9.1 (string)

}

86 : { »

status : affected (string)

version : 7.9.2 (string)

}

]

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

name : cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : cwe (string)

cweId : CWE-347 (string)

description : Improper Verification of Cryptographic Signature (string)

}

]

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2024-08-07T19:50:10.951Z (string)

}

cveMetadata : { »

cveId : CVE-2023-20236 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-23T19:10:48.388Z (string)

dateReserved : 2022-10-27T18:47:50.370Z (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

datePublished : 2023-09-13T16:39:19.418Z (string)

assignerShortName : cisco (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F31C819-2725-4295-8FF3-BA00A7A6BE92", "versionEndExcluding": "7.10.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*", "matchCriteriaId": "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8208:-:*:*:*:*:*:*:*", "matchCriteriaId": "A34DAD43-0C95-4830-8078-EFE3E6C0A930", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8212:-:*:*:*:*:*:*:*", "matchCriteriaId": "46F5CBF0-7F55-44C0-B321-896BDBA22679", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8218:-:*:*:*:*:*:*:*", "matchCriteriaId": "D381E343-416F-42AF-A780-D330954F238F", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*", "matchCriteriaId": "6655851F-58D9-49D9-A56E-8440A7F7BB45", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5E2AE67-DED3-4414-A194-386ADB2C8DC7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*", "matchCriteriaId": "3920133A-684D-4A9F-B65A-FF4EAE5052E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*", "matchCriteriaId": "9ED06361-5A68-4656-AEA5-240C290594CD", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE2514A1-486C-40F7-8746-56E2B973CBE6", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "3FEF8271-315F-4756-931F-015F790BE693", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:*", "matchCriteriaId": "71BD158E-71D8-4DCA-8C09-F8AB7EF0EBDD", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*", "matchCriteriaId": "324C97E6-1810-404F-9F45-6240F99FF039", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*", "matchCriteriaId": "57EB55BB-41B7-40A1-B6F5-142FE8AB4C16", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*", "matchCriteriaId": "433F4A82-04A4-4EAA-8C19-F7581DCD8D29", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*", "matchCriteriaId": "2D5E60AB-94FF-448A-89D8-5D2197E21C74", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:*", "matchCriteriaId": "91474DBC-FB31-4DDF-96C5-311FA1D53A74", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA241214-2F05-4360-9B50-385355E29CF4", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*", "matchCriteriaId": "A93212A4-50AB-42E7-89A4-5FBBAEA050C3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDA53A61-98B3-458C-8893-61CD7D6B1E48", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*", "matchCriteriaId": "F396564E-B477-4A27-A189-CEB737552E25", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*", "matchCriteriaId": "5445CC54-ACFB-4070-AF26-F91FEAA85181", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:*", "matchCriteriaId": "49E7ED87-8AC0-4107-A7A5-F334236E2906", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_1001:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F6E0FBE-70B7-413C-8943-39BEFE050298", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_1002:-:*:*:*:*:*:*:*", "matchCriteriaId": "37AE5FB0-D9A6-4EBE-9F7F-243299AE918B", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_1004:-:*:*:*:*:*:*:*", "matchCriteriaId": "60C9AAF8-4C5B-4EF5-B575-8235F3C54BCC", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_4009:-:*:*:*:*:*:*:*", "matchCriteriaId": "F40E779D-5865-4E4B-AE2D-CF1860BA19E2", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_4016:-:*:*:*:*:*:*:*", "matchCriteriaId": "DC6A867F-E809-4CB5-82DB-2670CB0A6359", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_4201:-:*:*:*:*:*:*:*", "matchCriteriaId": "41C5ECF8-EFFE-4C27-8DCB-2533BFD5200F", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_4202:-:*:*:*:*:*:*:*", "matchCriteriaId": "68C23248-3D61-4BAF-9602-BA31FB4374DD", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_4206:-:*:*:*:*:*:*:*", "matchCriteriaId": "C36494B4-8E2D-4399-97B5-725792BD5C45", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_4216:-:*:*:*:*:*:*:*", "matchCriteriaId": "0819EF17-5102-45FF-96AD-85BE17FD6921", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5001:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2A8C028-107B-4410-BCC6-5BCB8DB63603", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5002:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA13FE67-F4AE-46DF-921B-3FB91BDF742B", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5011:-:*:*:*:*:*:*:*", "matchCriteriaId": "98622F14-CC47-45E0-85E4-A7243309487C", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC7AE6C1-B7C6-4056-9719-B5CFF71970AD", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5500:-:*:*:*:*:*:*:*", "matchCriteriaId": "D686F339-9406-4ADF-B124-C815D43E4CAA", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5501:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A972EFE-4F7E-4BFC-8631-66A2D16B74A3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5501:se:*:*:*:*:*:*:*", "matchCriteriaId": "22FE69B4-DF27-46F1-8037-4B8D1F229C6B", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5502:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F72AEF0-EE70-40F8-B52B-1390820B87BB", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5502:se:*:*:*:*:*:*:*", "matchCriteriaId": "603980FE-9865-4A71-A37C-A90B7F3B72D6", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5504:-:*:*:*:*:*:*:*", "matchCriteriaId": "6AC4E089-296D-4C19-BF21-DDF2501DD77C", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5508:-:*:*:*:*:*:*:*", "matchCriteriaId": "43D21B01-A754-474F-8E46-14D733AB307E", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_5516:-:*:*:*:*:*:*:*", "matchCriteriaId": "17D6424C-972F-459C-B8F7-04FFD9F541BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_560:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4CC8256-E4F8-4DCB-B69A-40A7C5AA41E8", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_560-4:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB01E968-E838-4D3C-B603-BF7E4E0F8A2C", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_560-7:-:*:*:*:*:*:*:*", "matchCriteriaId": "08864A59-0840-4407-8D30-9CE34BAF05E7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_57b1-5dse-sys:-:*:*:*:*:*:*:*", "matchCriteriaId": "13EEDD1C-25BC-4AFA-AF60-66DE36927528", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_57b1-6d24-sys:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD3B06B-864E-4A35-B0C3-1654390022D2", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_57c1-48q6-sys:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD1B4F37-5AAA-4F40-8865-226289CB5CEB", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_57c3-mod-sys:-:*:*:*:*:*:*:*", "matchCriteriaId": "355F78C3-C07F-48C3-9B6E-55714EAA7331", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ncs_57c3-mods-sys:-:*:*:*:*:*:*:*", "matchCriteriaId": "98F06B5D-6CE8-42C3-8760-89B4EF1FFC21", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device.\r\n\r This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device."}, {"lang": "es", "value": "Una vulnerabilidad en la funci\u00f3n de arranque iPXE del software Cisco IOS XR podr\u00eda permitir que un atacante local autenticado instale una imagen de software no verificada en un dispositivo afectado. Esta vulnerabilidad se debe a una verificaci\u00f3n de imagen insuficiente. Un atacante podr\u00eda aprovechar esta vulnerabilidad manipulando los par\u00e1metros de arranque para la verificaci\u00f3n de im\u00e1genes durante el proceso de arranque iPXE en un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante iniciar una imagen de software no verificada en el dispositivo afectado."}], "id": "CVE-2023-20236", "lastModified": "2024-11-21T07:40:57.700", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "ykramarz@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-09-13T17:15:09.607", "references": [{"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-347"}], "source": "ykramarz@cisco.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-345"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0F31C819-2725-4295-8FF3-BA00A7A6BE92 (string)

versionEndExcluding : 7.10.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:cisco:8208:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A34DAD43-0C95-4830-8078-EFE3E6C0A930 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:cisco:8212:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 46F5CBF0-7F55-44C0-B321-896BDBA22679 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:cisco:8218:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D381E343-416F-42AF-A780-D330954F238F (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6655851F-58D9-49D9-A56E-8440A7F7BB45 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F5E2AE67-DED3-4414-A194-386ADB2C8DC7 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3920133A-684D-4A9F-B65A-FF4EAE5052E5 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9ED06361-5A68-4656-AEA5-240C290594CD (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BE2514A1-486C-40F7-8746-56E2B973CBE6 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3FEF8271-315F-4756-931F-015F790BE693 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 71BD158E-71D8-4DCA-8C09-F8AB7EF0EBDD (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 324C97E6-1810-404F-9F45-6240F99FF039 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 57EB55BB-41B7-40A1-B6F5-142FE8AB4C16 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 433F4A82-04A4-4EAA-8C19-F7581DCD8D29 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2D5E60AB-94FF-448A-89D8-5D2197E21C74 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 91474DBC-FB31-4DDF-96C5-311FA1D53A74 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FA241214-2F05-4360-9B50-385355E29CF4 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A93212A4-50AB-42E7-89A4-5FBBAEA050C3 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EDA53A61-98B3-458C-8893-61CD7D6B1E48 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F396564E-B477-4A27-A189-CEB737552E25 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5445CC54-ACFB-4070-AF26-F91FEAA85181 (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 49E7ED87-8AC0-4107-A7A5-F334236E2906 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:cisco:ncs_1001:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0F6E0FBE-70B7-413C-8943-39BEFE050298 (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:cisco:ncs_1002:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 37AE5FB0-D9A6-4EBE-9F7F-243299AE918B (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:cisco:ncs_1004:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 60C9AAF8-4C5B-4EF5-B575-8235F3C54BCC (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:cisco:ncs_4009:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F40E779D-5865-4E4B-AE2D-CF1860BA19E2 (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:cisco:ncs_4016:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DC6A867F-E809-4CB5-82DB-2670CB0A6359 (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:cisco:ncs_4201:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 41C5ECF8-EFFE-4C27-8DCB-2533BFD5200F (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:cisco:ncs_4202:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68C23248-3D61-4BAF-9602-BA31FB4374DD (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:cisco:ncs_4206:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C36494B4-8E2D-4399-97B5-725792BD5C45 (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:cisco:ncs_4216:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0819EF17-5102-45FF-96AD-85BE17FD6921 (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:cisco:ncs_5001:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E2A8C028-107B-4410-BCC6-5BCB8DB63603 (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:cisco:ncs_5002:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DA13FE67-F4AE-46DF-921B-3FB91BDF742B (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:cisco:ncs_5011:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 98622F14-CC47-45E0-85E4-A7243309487C (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BC7AE6C1-B7C6-4056-9719-B5CFF71970AD (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:cisco:ncs_5500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D686F339-9406-4ADF-B124-C815D43E4CAA (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:cisco:ncs_5501:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A972EFE-4F7E-4BFC-8631-66A2D16B74A3 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:cisco:ncs_5501:se:*:*:*:*:*:*:* (string)

matchCriteriaId : 22FE69B4-DF27-46F1-8037-4B8D1F229C6B (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:cisco:ncs_5502:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F72AEF0-EE70-40F8-B52B-1390820B87BB (string)

vulnerable : false (boolean)

}

41 : { »

criteria : cpe:2.3:h:cisco:ncs_5502:se:*:*:*:*:*:*:* (string)

matchCriteriaId : 603980FE-9865-4A71-A37C-A90B7F3B72D6 (string)

vulnerable : false (boolean)

}

42 : { »

criteria : cpe:2.3:h:cisco:ncs_5504:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6AC4E089-296D-4C19-BF21-DDF2501DD77C (string)

vulnerable : false (boolean)

}

43 : { »

criteria : cpe:2.3:h:cisco:ncs_5508:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 43D21B01-A754-474F-8E46-14D733AB307E (string)

vulnerable : false (boolean)

}

44 : { »

criteria : cpe:2.3:h:cisco:ncs_5516:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 17D6424C-972F-459C-B8F7-04FFD9F541BC (string)

vulnerable : false (boolean)

}

45 : { »

criteria : cpe:2.3:h:cisco:ncs_560:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D4CC8256-E4F8-4DCB-B69A-40A7C5AA41E8 (string)

vulnerable : false (boolean)

}

46 : { »

criteria : cpe:2.3:h:cisco:ncs_560-4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB01E968-E838-4D3C-B603-BF7E4E0F8A2C (string)

vulnerable : false (boolean)

}

47 : { »

criteria : cpe:2.3:h:cisco:ncs_560-7:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 08864A59-0840-4407-8D30-9CE34BAF05E7 (string)

vulnerable : false (boolean)

}

48 : { »

criteria : cpe:2.3:h:cisco:ncs_57b1-5dse-sys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 13EEDD1C-25BC-4AFA-AF60-66DE36927528 (string)

vulnerable : false (boolean)

}

49 : { »

criteria : cpe:2.3:h:cisco:ncs_57b1-6d24-sys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5CD3B06B-864E-4A35-B0C3-1654390022D2 (string)

vulnerable : false (boolean)

}

50 : { »

criteria : cpe:2.3:h:cisco:ncs_57c1-48q6-sys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AD1B4F37-5AAA-4F40-8865-226289CB5CEB (string)

vulnerable : false (boolean)

}

51 : { »

criteria : cpe:2.3:h:cisco:ncs_57c3-mod-sys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 355F78C3-C07F-48C3-9B6E-55714EAA7331 (string)

vulnerable : false (boolean)

}

52 : { »

criteria : cpe:2.3:h:cisco:ncs_57c3-mods-sys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 98F06B5D-6CE8-42C3-8760-89B4EF1FFC21 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en la función de arranque iPXE del software Cisco IOS XR podría permitir que un atacante local autenticado instale una imagen de software no verificada en un dispositivo afectado. Esta vulnerabilidad se debe a una verificación de imagen insuficiente. Un atacante podría aprovechar esta vulnerabilidad manipulando los parámetros de arranque para la verificación de imágenes durante el proceso de arranque iPXE en un dispositivo afectado. Una explotación exitosa podría permitir al atacante iniciar una imagen de software no verificada en el dispositivo afectado. (string)

}

]

id : CVE-2023-20236 (string)

lastModified : 2024-11-21T07:40:57.700 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : ykramarz@cisco.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-09-13T17:15:09.607 (string)

references : [ »

0 : { »

source : ykramarz@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB (string)

}

]

sourceIdentifier : ykramarz@cisco.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-347 (string)

}

]

source : ykramarz@cisco.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-345 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation None

Automatable No

Technical Impact Total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation None

Automatable No

Technical Impact Total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object