Cisco Security Updates 23 March 2023

The addressed vulnerabilities could allow the remote attacker to execute arbitrary commands, gain access, bypass security restrictions, gain privileges, obtain information, or cause a denial of service attack on the affected systems.

Sample of the addressed vulnerabilities:

1. Cisco IOS XE Software Denial of Service (CVE-2023-20027):

• CVSS: 8.6

• Attack Vector: Network

• Attack Complexity: Low

• Privileges Required: None

• User Interaction: None

• Consequences: Denial of Service

2. Cisco DNA Center Privilege Escalation (CVE-2023-20055):

• CVSS: 8

• Attack Vector: Network

• Attack Complexity: Low

• Privileges Required: Low

• User Interaction: Required

• Consequences: Gain Privileges

Sample of the affected products:

• Cisco IOS XE Software.

• Catalyst 8000 Edge Platforms Family.

• Cisco 4000 Series Integrated Services Routers.

• Cisco Catalyst 8200 Series Edge Platforms.

• Catalyst 9800 Embedded Wireless Controllers for Catalyst 9300, 9400, and 9500 Series Switches.

• Cisco DNA Center.

• Business 150 APs and 151 Mesh Extenders.

• Catalyst 9100 Aps.

• ASA 5506/H/W-X Security Appliances.