Riskcovery

CVE-2023-20186

State
Published
Severity
8.0 High
Published
Sep 27, 2023
Updated
Dec 16, 2025
Reserved
Oct 27, 2022

Read the record on cve.org

Description

A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to bypass command authorization and copy files to or from the file system of an affected device using the Secure Copy Protocol (SCP). This vulnerability is due to incorrect processing of SCP commands in AAA command authorization checks. An attacker with valid credentials and level 15 privileges could exploit this vulnerability by using SCP to connect to an affected device from an external machine. A successful exploit could allow the attacker to obtain or change the configuration of the affected device and put files on or retrieve files from the affected device.

Scores

CVSSScoreVectorSource
3.18.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:Hcisco

Weaknesses

Affected Products

ProductVersions
IOSCisco
  • 12.2(58)SEAffected
  • 12.2(58)SE1Affected
  • 12.2(58)SE2Affected
  • 12.2(58)EXAffected
  • 12.2(58)EYAffected
  • 12.2(58)EY1Affected
  • 12.2(58)EY2Affected
  • 12.2(58)EZAffected
  • 12.2(60)EZAffected
  • 12.2(60)EZ1Affected
  • 12.2(60)EZ2Affected
  • 12.2(60)EZ3Affected
  • 12.2(60)EZ4Affected
  • 12.2(60)EZ5Affected
  • 12.2(60)EZ6Affected
  • 12.2(60)EZ7Affected
  • 12.2(60)EZ8Affected
  • 12.2(60)EZ9Affected
  • 12.2(60)EZ10Affected
  • 12.2(60)EZ11Affected
  • 12.2(60)EZ12Affected
  • 12.2(60)EZ13Affected
  • 12.2(60)EZ14Affected
  • 12.2(60)EZ15Affected
  • 15.0(1)M1Affected
  • and 589 more versions
Cisco IOS XE SoftwareCisco
  • 3.7.0SAffected
  • 3.7.1SAffected
  • 3.7.2SAffected
  • 3.7.3SAffected
  • 3.7.4SAffected
  • 3.7.5SAffected
  • 3.7.6SAffected
  • 3.7.7SAffected
  • 3.7.4aSAffected
  • 3.7.2tSAffected
  • 3.7.0bSAffected
  • 3.7.1aSAffected
  • 3.3.0SGAffected
  • 3.3.2SGAffected
  • 3.3.1SGAffected
  • 3.8.0SAffected
  • 3.8.1SAffected
  • 3.8.2SAffected
  • 3.9.1SAffected
  • 3.9.0SAffected
  • 3.9.2SAffected
  • 3.9.1aSAffected
  • 3.9.0aSAffected
  • 3.2.0SEAffected
  • 3.2.1SEAffected
  • and 355 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.