Privilege Escalation Vulnerability in Cisco ThousandEyes Enterprise Agent

CVE-2023-20217

Summary

A vulnerability exists in the command-line interface (CLI) of the Cisco ThousandEyes Enterprise Agent, specifically for the Virtual Appliance installation. This flaw is attributed to insufficient input validation within the operating system's CLI, enabling an authenticated local attacker to issue specific commands using 'sudo'. Successful exploitation of this vulnerability would allow the unauthorized user to access arbitrary files with root privileges on the underlying operating system. It is essential that potential attackers possess valid credentials for the affected device, highlighting the importance of secure credential management.

References