nksistemas@nksistemas
Alerta Crítica: Explotación Activa de CVE-2023-20271 en Cisco Secure Email Gateway https://nksistemas.com/alerta-critica-explotacion-activa-de-cve-2023-20271-en-cisco-secure-email-gateway/
00000138
6.2K followersView on X
CVE-2023-20271(cisco / evolved_programmable_network_manager)
LOWCVSS 6.5 · MEDIUMImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.
0.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
Weakness type (CWE)
CWE-89
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- evolved_programmable_network_manager
- prime_infrastructure
Affected systems
Vendors
Products
evolved_programmable_network_managerprime_infrastructure
1 version affected across 2 products
Deep dive
Full discourse1 post
CPE platform detail4 entries
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cisco | evolved_programmable_network_manager | - | - | - |
| App | cisco | prime_infrastructure | - | - | - |
| App | cisco | prime_infrastructure | 3.10.4 | - | - |
| App | cisco | prime_infrastructure | 3.10.4 | - | - |