cveboard RSS feed

CVE-2023-20105

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with Read-only credentials to elevate privileges to Administrator on an affected system. This vulnerability is due to incorrect handling of password change requests. An attacker could exploit this vulnerability by authenticating to the application as a Read-only user and sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco TelePresence Video Communication Server (VCS) Expressway

Vendor
Cisco
Product
Cisco TelePresence Video Communication Server (VCS) Expressway
Platforms
Unknown
Default status
Unknown
Cisco TelePresence Video Communication Server (VCS) Expressway · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
X8.5.1affectedUnavailableUnavailableUnavailableNone listed
X8.5.3affectedUnavailableUnavailableUnavailableNone listed
X8.5affectedUnavailableUnavailableUnavailableNone listed
X8.6.1affectedUnavailableUnavailableUnavailableNone listed
X8.6affectedUnavailableUnavailableUnavailableNone listed
X8.1.1affectedUnavailableUnavailableUnavailableNone listed
X8.1.2affectedUnavailableUnavailableUnavailableNone listed
X8.1affectedUnavailableUnavailableUnavailableNone listed
X8.2.1affectedUnavailableUnavailableUnavailableNone listed
X8.2.2affectedUnavailableUnavailableUnavailableNone listed
X8.2affectedUnavailableUnavailableUnavailableNone listed
X8.7.1affectedUnavailableUnavailableUnavailableNone listed
X8.7.2affectedUnavailableUnavailableUnavailableNone listed
X8.7.3affectedUnavailableUnavailableUnavailableNone listed
X8.7affectedUnavailableUnavailableUnavailableNone listed
X8.8.1affectedUnavailableUnavailableUnavailableNone listed
X8.8.2affectedUnavailableUnavailableUnavailableNone listed
X8.8.3affectedUnavailableUnavailableUnavailableNone listed
X8.8affectedUnavailableUnavailableUnavailableNone listed
X8.9.1affectedUnavailableUnavailableUnavailableNone listed
X8.9.2affectedUnavailableUnavailableUnavailableNone listed
X8.9affectedUnavailableUnavailableUnavailableNone listed
X8.10.0affectedUnavailableUnavailableUnavailableNone listed
X8.10.1affectedUnavailableUnavailableUnavailableNone listed
X8.10.2affectedUnavailableUnavailableUnavailableNone listed
X8.10.3affectedUnavailableUnavailableUnavailableNone listed
X8.10.4affectedUnavailableUnavailableUnavailableNone listed
X12.5.8affectedUnavailableUnavailableUnavailableNone listed
X12.5.9affectedUnavailableUnavailableUnavailableNone listed
X12.5.0affectedUnavailableUnavailableUnavailableNone listed
X12.5.2affectedUnavailableUnavailableUnavailableNone listed
X12.5.7affectedUnavailableUnavailableUnavailableNone listed
X12.5.3affectedUnavailableUnavailableUnavailableNone listed
X12.5.4affectedUnavailableUnavailableUnavailableNone listed
X12.5.5affectedUnavailableUnavailableUnavailableNone listed
X12.5.1affectedUnavailableUnavailableUnavailableNone listed
X12.5.6affectedUnavailableUnavailableUnavailableNone listed
X12.6.0affectedUnavailableUnavailableUnavailableNone listed
X12.6.1affectedUnavailableUnavailableUnavailableNone listed
X12.6.2affectedUnavailableUnavailableUnavailableNone listed
X12.6.3affectedUnavailableUnavailableUnavailableNone listed
X12.6.4affectedUnavailableUnavailableUnavailableNone listed
X12.7.0affectedUnavailableUnavailableUnavailableNone listed
X12.7.1affectedUnavailableUnavailableUnavailableNone listed
X8.11.1affectedUnavailableUnavailableUnavailableNone listed
X8.11.2affectedUnavailableUnavailableUnavailableNone listed
X8.11.4affectedUnavailableUnavailableUnavailableNone listed
X8.11.3affectedUnavailableUnavailableUnavailableNone listed
X8.11.0affectedUnavailableUnavailableUnavailableNone listed
X14.0.1affectedUnavailableUnavailableUnavailableNone listed
X14.0.3affectedUnavailableUnavailableUnavailableNone listed
X14.0.2affectedUnavailableUnavailableUnavailableNone listed
X14.0.4affectedUnavailableUnavailableUnavailableNone listed
X14.0.5affectedUnavailableUnavailableUnavailableNone listed
X14.0.6affectedUnavailableUnavailableUnavailableNone listed
X14.0.7affectedUnavailableUnavailableUnavailableNone listed
X14.0.8affectedUnavailableUnavailableUnavailableNone listed
X14.0.9affectedUnavailableUnavailableUnavailableNone listed
X14.0.10affectedUnavailableUnavailableUnavailableNone listed
X14.0.11affectedUnavailableUnavailableUnavailableNone listed
X14.2.1affectedUnavailableUnavailableUnavailableNone listed
X14.2.0affectedUnavailableUnavailableUnavailableNone listed