CVE-2023-20216
Description
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role permissions. An attacker could exploit this vulnerability by authenticating to the application as a user with the BWORKS or BWSUPERADMIN role and issuing crafted commands on an affected system. A successful exploit could allow the attacker to execute commands beyond the sphere of their intended access level, including initiating installs or running operating system commands with elevated permissions. There are workarounds that address this vulnerability.
How to fix
- cisco broadworks_application_delivery_platformri.2023.05 or later
- cisco broadworks_application_server23.0.2023.05, 2023.05, 24.0.2023.05 or later
- cisco broadworks_database_server2023.05 or later
- cisco broadworks_execution_server2023.05 or later
- cisco broadworks_media_server2023.05 or later
- cisco broadworks_network_database_server2023.05 or later
- cisco broadworks_network_function_manager2023.05 or later
- cisco broadworks_network_server23.0.2023.05, 2023.05 or later
- cisco broadworks_profile_server23.0.2023.05, 2023.05 or later
- cisco broadworks_service_control_function_server2023.05 or later
- cisco broadworks_troubleshooting_server2023.06 or later
- cisco broadworks_xtended_services_platform23.0.2023.05, 2023.05 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco broadworks_application_delivery_platform | v < ri.2023.05 | ri.2023.05 |
| cisco broadworks_application_server | v < 23.0.2023.05, v < 2023.05, 24.0 ≤ v < 24.0.2023.05 | 23.0.2023.05, 2023.05, 24.0.2023.05 |
| cisco broadworks_database_server | v < 2023.05 | 2023.05 |
| cisco broadworks_execution_server | v < 2023.05 | 2023.05 |
| cisco broadworks_media_server | v < 2023.05 | 2023.05 |
| cisco broadworks_network_database_server | v < 2023.05 | 2023.05 |
| cisco broadworks_network_function_manager | v < 2023.05 | 2023.05 |
| cisco broadworks_network_server | v < 23.0.2023.05, v < 2023.05 | 23.0.2023.05, 2023.05 |
| cisco broadworks_profile_server | v < 23.0.2023.05, v < 2023.05 | 23.0.2023.05, 2023.05 |
| cisco broadworks_service_control_function_server | v < 2023.05 | 2023.05 |
| cisco broadworks_troubleshooting_server | v < 2023.06 | 2023.06 |
| cisco broadworks_xtended_services_platform | v < 23.0.2023.05, v < 2023.05 | 23.0.2023.05, 2023.05 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.