VYPR
← All advisories
Medium severity4.9NVD Advisory· Published May 18, 2023· Updated Jun 17, 2026

CVE-2023-20173

CVE-2023-20173

Description

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF) attack through an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Cisco Systems, Inc./Identity Services Engine Software18 versions
    cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*range: <3.0.0
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch7:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.2:patch1:*:*:*:*:*:*
    • (no CPE)range: n/a
  • Cisco Systems, Inc./Identity Services Engine Expressllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.