Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
Alerta Crítica: Explotación Activa de CVE-2023-20271 en Cisco Secure Email Gateway https://nksistemas.com/alerta-critica-explotacion-activa-de-cve-2023-20271-en-cisco-secure-email-gateway/
Post summary
The text is a critical alert stating that CVE-2023-20271 in Cisco Secure Email Gateway is being actively exploited. It provides no PoC, exploit tool, patch, or detailed technical vulnerability information.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cisco | evolved_programmable_network_manager | - | - | - |
| App | cisco | prime_infrastructure | - | - | - |
| App | cisco | prime_infrastructure | 3.10.4 | - | - |
| App | cisco | prime_infrastructure | 3.10.4 | - | - |