Cyber Resilience

CVE-2023-20115

Cisco Nx-Os 10.1\(1\) … 9.3\(9\)

Published
23 August 2023
Modified
21 November 2024
Patch / advisory
CVSS Score v3.1 5.4
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0044 36th percentile
Risk Priority 44 floored blend · peak EPSS

Summary

CVE-2023-20115 is a medium-severity Lack of Administrator Control over Security (CWE-671) vulnerability in Cisco Nx-Os. Its CVSS base score is 5.4 (Medium).

Operationally, ranked at the 36th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected…

more

device. This vulnerability is due to a logic error when verifying the user role when an SFTP connection is opened to an affected device. An attacker could exploit this vulnerability by connecting and authenticating via SFTP as a valid, non-administrator user. A successful exploit could allow the attacker to read or overwrite files from the underlying operating system with the privileges of the authenticated user. There are workarounds that address this vulnerability.

CWE(s)

Related Threats

CVEs Like This One

CVE-2024-20291Same product: Cisco Nexus 3048
CVE-2023-20089Same product: Cisco Nexus 9000V
CVE-2024-20399Same product: Cisco Nexus 3048
CVE-2023-20169Same product: Cisco Nexus 3048
CVE-2024-20284Same product: Cisco Nexus 3048
CVE-2024-20286Same product: Cisco Nexus 3048
CVE-2024-20285Same product: Cisco Nexus 3048
CVE-2024-20294Same product: Cisco Nexus 3048
CVE-2023-20168Same product: Cisco Nexus 3048
CVE-2023-20050Same product: Cisco Nexus 3048

Affected Assets

cisco
nx-os
10.1\(1\), 10.1\(2\), 10.1\(2t\), 10.2\(1\), 10.2\(1q\)

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V6.2.11
  • V13.2.3
  • V4.3.2
  • V8.1.4

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-01 mostly match
prevents

Configuration management directly enables administrators to tailor security settings and baselines to their environment.

GV.RR-02 partial match
prevents

Establishing admin roles and authorities supports the ability to exercise security control but does not address product-level restrictions.

PR.AA-05 partial match
prevents

Defining and enforcing access policies gives administrators explicit control over authorization settings.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

degrades

Access control policy defines how administrators can tailor security settings to the environment.

degrades

Access rights management enables administrators to adjust privileges and security parameters as needed.

degrades

Privileged access rights control ensures administrators can configure and restrict elevated security functions.

degrades

Information access restriction mechanisms allow administrators to set and modify access rules for the environment.

degrades

Configuration management provides the means for administrators to tailor security settings and harden the product.

References