CVE-2023-20223

Summary

CVE-2023-20223 is a newly disclosed vulnerability in Cisco DNA Center. This issue permits unauthenticated, remote attackers to manipulate data in a repository associated with an internal service on susceptible devices. The cause of this vulnerability stems from inadequate access control on API requests. An assailant can exploit this flaw by crafting a specially designed API request, which, if successful, enables the attacker to modify data handled by an internal service on the vulnerable device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.