Severity
High
Analysis Summary
CVE-2023-20185
Cisco ACI Multi-Site CloudSec could allow a remote attacker to obtain sensitive information, caused by an issue with the implementation of the ciphers that are used by the CloudSec encryption feature. By intercepting intersite encrypted traffic and using cryptanalytic techniques to break the encryption, an attacker could exploit this vulnerability to read or modify the traffic that is transmitted between the sites.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2023-20185
Affected Vendors
Cisco
Affected Products
- Cisco ACI Multi-Site CloudSec Encryption
- Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.