CVE-2023-20185

Summary

CVE-2023-20185 is a vulnerability affecting the Cisco ACI Multi-Site CloudSec encryption feature on Cisco Nexus 9000 Series Fabric Switches in ACI mode. This issue allows unauthenticated, remote attackers with an on-path position between ACI sites to intercept and decrypt intersite encrypted traffic using cryptanalytic techniques. As a result, attackers can read or modify the data transmitted between the sites. Unfortunately, Cisco has not released any software updates to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.