Medium severity · published Nov 1, 2023
CVE-2023-20170
A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and…
6.7
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, an attacker must have valid Administrator-level privileges on the affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cisco Identity Services Engine Software · Cisco
All versions, or not specified · source: vendor
IS
Identity Services Engine · Cisco
3.2; 3.2; 3.2 · source: NVD
Affected product
CI
Cisco Identity Services Engine Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20170
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20170
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-QeXegrCw
More from Cisco Identity Services Engine Software
10.0
CVE-2026-76460
Cisco Identity Services Engine Authentication Bypass Vulnerability
10.0
CVE-2025-20337
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
10.0
CVE-2025-20281
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
10.0
CVE-2026-76423
Cisco ISE API Authentication Bypass Vulnerability
10.0
CVE-2026-20130
Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
