CVE-2023-20258: A vulnerability in the web-based management interface of Cisco Prime Infras

Description

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper processing of serialized Java objects by the affected application. An attacker could exploit this vulnerability by uploading a document containing malicious serialized Java objects to be processed by the affected application. A successful exploit could allow the attacker to cause the application to execute arbitrary commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Prime Infrastructure

2.0.0affected
2.0.10affected
2.0.39affected
2.1.0affected
2.1.1affected
2.1.2affected
2.1.56affected
2.2.0affected
2.2.1affected
2.2.2affected
2.2.3affected
2.2.10affected
2.2.8affected
2.2.4affected
2.2.7affected
2.2.5affected
2.2.9affected
2.2.1 Update 01affected
2.2.2 Update 03affected
2.2.2 Update 04affected
2.2.3 Update 02affected
2.2.3 Update 03affected
2.2.3 Update 04affected
2.2.3 Update 05affected
2.2.3 Update 06affected
3.0.0affected
3.0.1affected
3.0.2affected
3.0.3affected
3.0.4affected
3.0.6affected
3.0.5affected
3.0.7affected
3.1.0affected
3.1.1affected
3.1.7affected
3.1.5affected
3.1.2affected
3.1.3affected
3.1.4affected
3.1.6affected
3.2.2affected
3.2.0-FIPSaffected
3.2.1affected
3.3.0affected
3.3.1affected
3.3.0 Update 01affected
3.4.0affected
3.4.1affected
3.4.2affected
3.4.1 Update 01affected
3.4.1 Update 02affected
3.4.2 Update 01affected
3.5.0affected
3.5.1affected
3.5.0 Update 01affected
3.5.0 Update 02affected
3.5.0 Update 03affected
3.5.1 Update 01affected
3.5.1 Update 02affected
3.5.1 Update 03affected
3.6.0affected
3.6.0 Update 01affected
3.6.0 Update 02affected
3.6.0 Update 03affected
3.6.0 Update 04affected
2.1affected
2.2affected
3.2affected
3.4_DP1affected
3.4_DP3affected
3.4_DP2affected
3.5_DP1affected
3.4_DP7affected
3.4_DP10affected
3.4_DP5affected
3.1_DP15affected
3.4_DP11affected
3.4_DP8affected
3.7_DP1affected
3.3_DP4affected
3.10_DP1affected
3.8_DP1affected
3.7_DP2affected
3.6_DP1affected
3.1_DP16affected
3.5_DP4affected
3.3_DP3affected
3.2_DP2affected
3.4_DP4affected
3.1_DP14affected
3.1_DP6affected
3.1_DP9affected
3.4_DP6affected
3.2_DP3affected
3.4_DP9affected
3.3_DP2affected
3.2_DP1affected
3.1_DP10affected
3.9_DP1affected
3.3_DP1affected
3.1_DP13affected
3.5_DP2affected
3.1_DP12affected
3.1_DP4affected
3.5_DP3affected
3.1_DP8affected
3.1_DP7affected
3.2_DP4affected
3.1_DP11affected
3.1_DP5affected
3.7.0affected
3.7.1affected
3.7.1 Update 04affected
3.7.1 Update 06affected
3.7.1 Update 07affected
3.7.1 Update 03affected
3.7.0 Update 03affected
3.7.1 Update 01affected
3.7.1 Update 02affected
3.7.1 Update 05affected
3.8.0affected
3.8.1affected
3.8.1 Update 02affected
3.8.1 Update 04affected
3.8.1 Update 01affected
3.8.1 Update 03affected
3.8.0 Update 01affected
3.8.0 Update 02affected
3.9.0affected
3.9.1affected
3.9.1 Update 02affected
3.9.1 Update 03affected
3.9.1 Update 01affected
3.9.1 Update 04affected
3.9.0 Update 01affected
3.10.0affected
3.10.3affected
3.10.1affected
3.10.2affected
3.10 Update 01affected
3.10.4affected
3.10.4 Update 01affected

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq ↗