CVE-2023-20035
CVE-2023-20035 is a high-severity vulnerability in Cisco Ios Xe Sd-wan with a CVSS 3.x base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-146.
Key facts
- Severity: High (CVSS 3.x base score 7.8)
- EPSS exploit prediction: 0% (13th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-146
- Affected product: Cisco Ios Xe Sd-wan
- Published:
- Last modified:
Description
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to insufficient input validation by the system CLI. An attacker with privileges to run commands could exploit this vulnerability by first authenticating to an affected device using either local terminal access or a management shell interface and then submitting crafted input to the system CLI. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system. Note: For additional information about specific impacts, see the Details section of this advisory.
Frequently asked questions
- What is CVE-2023-20035?
- A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to insufficient input validation by the system CLI. An attacker with privileges to run commands could exploit this vulnerability by first authenticating to an affected device using either local terminal access or a management shell interface and then submitting crafted input to the system CLI. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system. Note: For additional information about specific impacts, see the Details section of this advisory.
- How severe is CVE-2023-20035?
- CVE-2023-20035 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2023-20035 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (13th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-20035?
- CVE-2023-20035 affects Cisco Ios Xe Sd-wan. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2023-20035?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2023-20035 published?
- CVE-2023-20035 was published on 2023-03-23 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*
More vulnerabilities in Cisco Ios Xe Sd-wan
- CVE-2021-34727 — Critical (CVSS 9.8): A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker…
- CVE-2021-1619 — Critical (CVSS 9.8): A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could…
- CVE-2021-1301 — Critical (CVSS 9.8): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks…
- CVE-2021-1300 — Critical (CVSS 9.8): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks…
- CVE-2020-3375 — Critical (CVSS 9.8): A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer…
- CVE-2021-1305 — High (CVSS 8.8): Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an…
All CVEs affecting Cisco Ios Xe Sd-wan →
Other CWE-146 vulnerabilities
- CVE-2024-20329 — Critical (CVSS 9.9): A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated,…
- CVE-2025-53192 — High (CVSS 8.8): ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache…
- CVE-2022-4055 — High (CVSS 7.4): When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional…
- CVE-2024-20470 — High (CVSS 7.2): A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN…
- CVE-2025-20237 — Medium (CVSS 6.0): A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat…
- CVE-2026-22266 — Medium (CVSS 4.7): Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a…