Privilege Escalation Vulnerability in Cisco ThousandEyes Enterprise Agent

CVE-2023-20224

Summary

A privilege escalation vulnerability exists in the CLI of Cisco ThousandEyes Enterprise Agent (Virtual Appliance). This issue stems from improper input validation for user-supplied CLI arguments. An authenticated local attacker could exploit this weakness by accessing the affected device and issuing specially crafted commands, potentially allowing them to execute arbitrary commands with root privileges. It is essential for users to be aware that valid credentials on the device are required to mount such an attack. For more details, see the Cisco security advisory at the following link: Cisco Advisory.

References