CVE-2023-20127: cisco prime infrastructure

csirt@kutim:~/threat-intel/cve/CVE-2023-20127

CVSS 6.5 · Medium EPSS 0,92%

Kerentanan Path Traversal: 'dir/../../filename' pada cisco prime infrastructure. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

Rincian

Terbit di NVD: 5 April 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-27: Path Traversal: 'dir/../../filename'
EPSS (30 hari): 0,92% peluang dieksploitasi; lebih tinggi dari 59,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
cisco	prime infrastructure	Semua versi hingga 3.7
cisco	prime infrastructure	Versi 3.10 hingga sebelum 3.10.2
cisco	prime infrastructure	Versi 3.8
cisco	prime infrastructure	Versi 3.8.1
cisco	prime infrastructure	Versi 3.9
cisco	prime infrastructure	Versi 3.9.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.