Cisco Security Updates – 07 September 2023

The addressed vulnerabilities could allow the attacker to gain access, execute arbitrary code, bypass security restrictions, gain elevated privileges, or perform denial of service attacks on the affected products by sending a specially crafted request.

Sample of the addressed vulnerabilities:

1. Cisco BroadWorks Application Delivery and Xtended Services Platform Authentication Bypass (CVE-2023-20238):

• CVSS: 10
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Bypass Security

2. Cisco Identity Services Engine RADIUS Denial of Service (CVE-2023-20243):

• CVSS: 8.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service