✕
Request a Demo
Rewterz
Rewterz Threat Advisory – CVE-2023-20215 – Cisco AsyncOS Software for Cisco Secure Web Appliance Vulnerbility
August 3, 2023
Rewterz
Rewterz Threat Alert – New NodeStealer Variant Targeting Facebook Business Accounts and Crypto Wallets – Active IOCs
August 3, 2023

Rewterz Threat Advisory – CVE-2023-20204 – Cisco BroadWorks CommPilot Application Software Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-20204

Cisco BroadWorks CommPilot Application Software is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the web-based management interface. By persuading a user to click a crafted link, a remote authenticated attacker could exploit this vulnerability to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Impact

  • Cross-Site Scripting

Indicators Of Compromise

CVE

  • CVE-2023-20204

Affected Vendors

Cisco

Affected Products

  • Cisco BroadWorks Application Server
  • Cisco BroadWorks Application Delivery Platform Software
  • Cisco BroadWorks Xtended Services Platform

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.

Cisco Security Advisory