Impact
The CVE involves incorrect privilege handling that permits unauthorized escalation of privileges. An attacker could obtain higher access levels, compromising confidentiality, integrity, or availability of the affected systems. The weakness is identified as CWE-269, which covers improper privilege management.
Affected Systems
Cisco Cyber Vision, Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense (FTD) Software, and Cisco UTD SNORT IPS Engine Software are listed as affected. No specific version information is available in the advisory.
Risk and Exploitability
The vulnerability has a CVSS score of 7.8 and is not currently listed in the CISA KEV catalog. EPSS data is not available, indicating limited publicly known exploitation. An attacker would need access to administrative interfaces or exploit locally privileged processes to abuse the flaw; the exact attack vector is not detailed in the advisory, so the likelihood remains moderate based on the CVSS rating.
OpenCVE Enrichment