Improper access control in Cisco Intersight Virtual Appliance
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass, Code execution
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284 and CWE-77.
Summary
A vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access internal HTTP services that are otherwise inaccessible. This vulnerability is due to insufficient restrictions on internally accessible http proxies. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker access to internal subnets beyond the sphere of their intended access level.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cisco | Cisco Intersight Virtual Appliance | 1.0.9-503; 1.0.9-536; 1.0.9-538; 1.0.9-558; 1.0.9-561 | — | No fix listed | CNA |
- Cisco Intersight Virtual Appliance VendorCisco Affected 1.0.9-503; 1.0.9-536; 1.0.9-538; 1.0.9-558; 1.0.9-561 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:intersight_virtual_appliance:*:*:*:*:*:*:*:* | before 1.0.9-589 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:intersight_assist:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:a:cisco:intersight_connected_virtual_appliance:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:a:cisco:intersight_private_virtual_appliance:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
- cpe:2.3:a:cisco:intersight_virtual_appliance:*:*:*:*:*:*:*:* Versions before 1.0.9-589 Vulnerable ·Cisco
- cpe:2.3:a:cisco:intersight_assist:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:a:cisco:intersight_connected_virtual_appliance:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:a:cisco:intersight_private_virtual_appliance:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20237
- 2026-10-03 Alias added: GHSA-92f9-q83c-gm35
References
More Cisco Intersight Virtual Appliance vulnerabilities
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
- TI-2021-13746 Cisco Intersight Virtual Appliance Command Injection Vulnerability CVSS 3.1HIGH 8.8
- TI-2021-01340 Cisco Intersight Virtual Appliance Vulnerabilities CVSS 3.1HIGH 7.2
- TI-2021-01325 Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities CVSS 3.1HIGH 8.3
- TI-2021-01324 Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities CVSS 3.1HIGH 8.3
- TI-2021-01339 Cisco Intersight Virtual Appliance Vulnerabilities CVSS 3.1MEDIUM 6.5
Sources
- CVE-2023-20237 · CVE Program
- CVE-2023-20237 · NVD
- FIRST EPSS
- GHSA-92f9-q83c-gm35 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences