Medium severity6.0NVD Advisory· Published Apr 5, 2023· Updated Jun 17, 2026

CVE-2023-20121

Description

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Evolved Programmable Network Manager2 versions
cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*range: <7.0.1
- (no CPE)
Cisco Systems, Inc./Identity Services Engine Software2 versions
cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*
- (no CPE)range: n/a
Cisco Systems, Inc./Prime Infrastructure2 versions
cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*range: <3.10.4
- (no CPE)
Cisco Systems, Inc./Identity Services Engine Expressllm-fuzzy

Patches

Vulnerability mechanics

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvknvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.390
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000