CVE-2023-20044
Medium
Description
A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.
SeverityMedium
CVSS6.7
Exploit probability4. percentile0.1%
Product
Cisco Cx Cloud Agent
PublishedJan 20, 2023
First seenJan 20, 2023
Weakness typeCWE-708CWE-708
How to fix
Update
- cisco cx_cloud_agent2.2.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco cx_cloud_agent | v < 2.2.1 | 2.2.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.