Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4.
Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system.
These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Client Software. An attacker could exploit these vulnerabilities by logging in to an affected device at the same time that another user is accessing Cisco Secure Client on the same system, and then sending crafted packets to a port on that local host. A successful exploit could allow the attacker to crash the VPN Agent service, causing it to be unavailable to all users of the system. To exploit these vulnerabilities, the attacker must have valid credentials on a multi-user system.
CVE-2023-20175 is a high-severity OS command injection vulnerability in Cisco Identity Services Engine (ISE) software. It allows an authenticated local attacker with at least read-only privileges to execute arbitrary OS commands and escalate privileges to root by exploiting insufficient input validation in a specific CLI command. The vulnerability affects multiple versions of Cisco ISE from 2.6.0 through 3.2.0. Exploitation requires valid credentials but no user interaction beyond command submission. The vulnerability can compromise confidentiality, integrity, and availability of the affected system. No known exploits are currently reported in the wild.
CVE-2023-20170 is a command injection vulnerability in Cisco Identity Services Engine (ISE) software that allows an authenticated local attacker with Administrator privileges to execute arbitrary commands on the underlying OS and escalate privileges to root. Exploitation requires valid admin credentials and involves submitting a crafted CLI command due to insufficient input validation. The vulnerability has a CVSS score of 6.0, indicating medium severity, with high impact on confidentiality and integrity but no impact on availability. No known exploits are currently reported in the wild. European organizations using Cisco ISE for network access control and policy enforcement could face risks if attackers gain admin access. Mitigation requires Cisco patches or strict administrative access controls and input validation. Countries with significant Cisco ISE deployments and critical infrastructure relying on network access control are most at risk.
CVE-2023-20063 is a high-severity code injection vulnerability affecting Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) devices. It allows an authenticated local attacker with administrative privileges on either FMC or FTD to execute arbitrary commands with root privileges on the paired device. The vulnerability arises from insufficient validation of user-supplied input in inter-device communication, enabling command injection via expert mode. Exploitation requires high privileges and no user interaction but can lead to full system compromise, impacting confidentiality, integrity, and availability. There are no known exploits in the wild yet, but the broad range of affected versions and critical access level make timely patching essential. European organizations using Cisco Firepower solutions in critical infrastructure or enterprise networks are at risk. Mitigation involves applying Cisco patches when available, restricting administrative access, and monitoring for anomalous expert mode activity. Countries with significant Cisco Firepower deployments and critical infrastructure, such as Germany, France, the UK, and the Netherlands, are most likely to be affected.
CVE-2023-20048 is a critical vulnerability in Cisco Firepower Management Center (FMC) that allows an authenticated remote attacker with valid credentials to execute unauthorized configuration commands on managed Firepower Threat Defense (FTD) devices. The flaw arises from insufficient authorization checks in the FMC web services interface, enabling privilege escalation within the network defense infrastructure. Exploitation requires no user interaction but does require valid FMC credentials. The vulnerability impacts a wide range of FMC versions from 6.2.3 through 7.3.1.1. Successful exploitation could compromise confidentiality and availability by allowing attackers to alter device configurations, potentially disrupting network security controls.
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
CVE-2023-20101 is a critical vulnerability in Cisco Emergency Responder version 12.5(1)SU4 that involves hard-coded root credentials. An unauthenticated remote attacker can exploit this flaw to log in as root using static, unchangeable credentials embedded in the system. This allows full control over the affected device, enabling arbitrary command execution with root privileges. The vulnerability stems from development-only static credentials that were never removed or disabled in production releases. The CVSS score is 9.8, reflecting the high impact and ease of exploitation without authentication or user interaction. Although no known exploits are currently reported in the wild, the risk is severe given the critical nature of the affected systems. Cisco Emergency Responder is widely used in enterprise telephony and emergency call management, making this vulnerability particularly impactful. European organizations relying on Cisco telephony infrastructure could face significant confidentiality, integrity, and availability risks if exploited.
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause the device to crash.
This vulnerability is due to insufficient validation of attributes in the Group Domain of Interpretation (GDOI) and G-IKEv2 protocols of the GET VPN feature. An attacker could exploit this vulnerability by either compromising an installed key server or modifying the configuration of a group member to point to a key server that is controlled by the attacker. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a denial of service (DoS) condition. For more information, see the Details ["#details"] section of this advisory.
CVE-2023-20186 is a high-severity vulnerability in Cisco IOS and IOS XE software affecting the Authentication, Authorization, and Accounting (AAA) feature. An authenticated attacker with level 15 privileges can exploit improper authorization in SCP command processing to bypass command authorization. This allows unauthorized copying of files to or from the device's file system, potentially leading to configuration disclosure or modification. Exploitation requires valid credentials and no user interaction. The vulnerability impacts confidentiality, integrity, and availability of affected devices. It affects a wide range of Cisco IOS versions, many of which are commonly deployed in enterprise and service provider networks. No known exploits are currently reported in the wild, but the potential impact is significant. European organizations relying on Cisco IOS devices should prioritize patching and access controls to mitigate risk. Countries with large telecom infrastructure and enterprise deployments of Cisco gear are most at risk.
CVE-2023-20231 is a high-severity OS command injection vulnerability in the web UI of Cisco IOS XE Software. It allows an authenticated remote attacker with Lobby Ambassador account credentials to execute arbitrary CLI commands at privilege level 15 due to insufficient input validation. The vulnerability affects numerous IOS XE versions across the 16.12, 17.x, and 17.9 branches. Exploitation does not require user interaction but does require valid credentials for a non-default account. No known exploits are currently reported in the wild. The vulnerability poses significant risks to confidentiality, integrity, and availability of affected devices and networks.
CVE-2023-20252 is a critical vulnerability in Cisco SD-WAN vManage affecting versions 20.9.3.2 and 20.11.1.2. It stems from missing authorization checks in the SAML APIs, allowing unauthenticated remote attackers to gain unauthorized access as arbitrary users. Exploitation requires no authentication or user interaction and can lead to full compromise of confidentiality, integrity, and availability of the SD-WAN management platform. The vulnerability has a CVSS score of 9.
CVE-2023-20254 is a high-severity vulnerability in Cisco SD-WAN vManage affecting its multi-tenant session management. An authenticated remote attacker with access to the system can exploit insufficient session management to access or manipulate another tenant's data and configurations. Exploitation requires the multi-tenant feature to be enabled and does not require user interaction but does require authentication. Successful exploitation can lead to unauthorized data disclosure, configuration changes, or denial of service for affected tenants. The vulnerability affects numerous versions of Cisco SD-WAN vManage, spanning multiple major releases. No known exploits are currently reported in the wild. The CVSS score is 7.2, reflecting high impact on confidentiality, integrity, and availability with relatively low attack complexity. European organizations using Cisco SD-WAN with multi-tenant setups should prioritize patching or mitigating this vulnerability to prevent cross-tenant compromise and service disruption.
The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary.
This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
CVE-2023-20236 is a vulnerability in Cisco IOS XR software's iPXE boot function that allows an authenticated local attacker to bypass cryptographic signature verification and install an unverified software image. Exploitation requires local access with high privileges and no user interaction. Successful exploitation can compromise confidentiality, integrity, and availability by booting malicious firmware. The vulnerability affects numerous IOS XR versions widely used in network infrastructure. While no known exploits are reported in the wild, the medium CVSS score reflects the significant impact but limited attack vector. European organizations relying on Cisco IOS XR for critical routing and network functions are at risk, especially in countries with high Cisco market penetration and critical telecom infrastructure. Mitigation involves applying vendor patches once available, restricting local access, and monitoring boot configurations. Countries like Germany, France, UK, Italy, and the Netherlands are most likely affected due to their extensive Cisco deployments and strategic network importance.
CVE-2023-20135 is a medium-severity vulnerability in Cisco IOS XR Software that involves improper verification of cryptographic signatures due to a TOCTOU race condition during ISO image installation. An authenticated local attacker with high privileges can exploit this flaw by modifying an ISO image and performing parallel install requests, potentially leading to arbitrary code execution on the device. The vulnerability affects multiple IOS XR versions including 7.5.x through 7.9.x. Exploitation does not require user interaction but does require local authentication and high privileges. No known exploits are currently reported in the wild. This vulnerability poses a significant risk to network infrastructure devices running affected IOS XR versions, especially in environments where local access is possible.
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.
This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following:
Identify valid credentials that could then be used to establish an unauthorized remote access VPN session.
Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).
Notes:
Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured.
This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured.
Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.
CVE-2023-20238 is a critical vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Xtended Services Platform. It allows an unauthenticated remote attacker to forge SSO tokens and gain unauthorized access to affected systems. Exploitation requires knowledge of a valid user ID but no authentication or user interaction is needed. Successful exploitation can lead to toll fraud, command execution with the privileges of the forged account, and if an administrator account is forged, full control over confidential data and system settings. The vulnerability affects multiple versions of Cisco BroadWorks, including versions 21.sp1 through 23.0 with numerous patches. The CVSS score is 10.0, indicating critical severity with network attack vector, low complexity, no privileges required, and no user interaction. There are no known exploits in the wild yet.
CVE-2023-20250 is a stack-based buffer overflow vulnerability in the web-based management interface of Cisco Small Business RV Series routers, including models RV110W, RV130, RV130W, and RV215W. An authenticated attacker with valid administrator credentials can exploit this flaw by sending crafted requests to the interface, resulting in arbitrary code execution with root privileges. The vulnerability affects multiple firmware versions and does not require user interaction beyond authentication. Although the CVSS score is 6.5 (medium severity), the impact on confidentiality and integrity is high due to root-level code execution. No known exploits are currently reported in the wild. European organizations using these routers should prioritize patching and restrict administrative access to mitigate risk. Countries with significant Cisco Small Business router deployments and critical infrastructure reliance on these devices are more likely to be impacted.
