CVE-2023-20016
Estado: ModificadaMedia (6.5)—
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method used for the backup function. An attacker could exploit this vulnerability by leveraging a static key used for the backup configuration feature.
Leer descripción completaMostrar menos
A successful exploit could allow the attacker to decrypt sensitive information that is stored in full state and configuration backup files, such as local user credentials, authentication server passwords, Simple Network Management Protocol (SNMP) community names, and other credentials.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.11%
- Percentil entre todas las CVEs puntuadas: 1
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (12)
Cisco — FxosCisco — UCS 6200 FirmwareCisco — UCS 6248up FirmwareCisco — UCS 6296up FirmwareCisco — UCS 6300 FirmwareCisco — UCS 6324 FirmwareCisco — UCS 6332-16up FirmwareCisco — UCS 6332 FirmwareCisco — UCS 64108 FirmwareCisco — UCS 6454 FirmwareCisco — UCS 6536 FirmwareCisco — UCS Central Software
CWE
- CWE-321
- CWE-330
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-20016",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-20016",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-10-25T14:36:41.126540Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 6.3,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 4,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 4,
"exploitabilityScore": 2
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Unified Computing System (Managed)",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2023-02-23T20:15:13.407",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-321"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-330"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method used for the backup function. An attacker could exploit this vulnerability by leveraging a static key used for the backup configuration feature. A successful exploit could allow the attacker to decrypt sensitive information that is stored in full state and configuration backup files, such as local user credentials, authentication server passwords, Simple Network Management Protocol (SNMP) community names, and other credentials."
}
],
"lastModified": "2026-06-17T05:29:16.060",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6536_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "834E1736-9E8D-476A-ADA9-EB81BEB8DC6C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6536:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0C36A364-DBC0-44DA-9DB0-6CC8E9D074BF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_64108_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CF884E9-68AA-44F7-A551-F7D7DF2378DB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BC04D48B-8B2F-45E1-A445-A87E92E790B8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6454_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "085034AF-4825-4E06-BCBD-6F0D80959A26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4FD096B7-6F8E-4E48-9EC4-9A10AA7D9AA0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6200_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BD99394-5B1B-49FB-9085-3D92E4DBF1A5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A0B96E5C-CC27-4020-93CE-413B95DCABB0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6248up_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AE37430-9711-443E-BF69-CAAEDD2A0E45"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6248up:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "49112D3F-DFAD-4E71-992B-9E0640FA388C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6296up_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E325ADE-5098-4C1B-82FB-CB04DDB68A2A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6296up:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "38A1D8F2-A4A6-4BAC-8326-9F9DE9572FA2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6300_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "192B4BF0-A6E4-4241-8E30-48CAE65203F1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C6BCF41B-A617-4563-8D14-E906411354FB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6324_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63D87F40-279D-46BD-9A1E-B980E9DDD24D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6324:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B82093C6-B36D-4E4E-AD7F-8C107646B8D9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6332_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "148B3732-6F6C-4865-8FCC-A215883BEEC9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6332:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E406DDCE-6753-43E9-B6F0-7A038DE84E41"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15",
"versionEndExcluding": "4.2\\(3c\\)"
},
{
"criteria": "cpe:2.3:o:cisco:ucs_6332-16up_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "027A27D8-DD06-420A-BCDC-553641F5CC83"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ucs_6332-16up:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "054D8EB2-97A3-4725-9DFF-27A4D231D90A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:fxos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC22C69D-7B86-4ED8-87AA-D259D026CA6B",
"versionEndExcluding": "2.6.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:firepower_4100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E9552E6-0B9B-4B32-BE79-90D4E3887A7B"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A0CBC7F5-7767-43B6-9384-BE143FCDBD7F"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "957D64EB-D60E-4775-B9A8-B21CA48ED3B1"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A694AD51-9008-4AE6-8240-98B17AB527EE"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "38AE6DC0-2B03-4D36-9856-42530312CC46"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71DCEF22-ED20-4330-8502-EC2DD4C9838F"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3DB2822B-B752-4CD9-A178-934957E306B4"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "81F4868A-6D62-479C-9C19-F9AABDBB6B24"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "65378F3A-777C-4AE2-87FB-1E7402F9EA1B"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-24:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "18048A84-BA0F-48EF-AFFB-635FF7F70C66"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-36:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "317DF3DD-C7CD-4CA2-804F-A738E048BEB4"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-40:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C13CF29B-9308-452B-B7E0-9E818B5A6C1E"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-44:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DB527C2-855E-4BB9-BCA7-94BE86100D44"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-44_x_3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E82C1B05-990D-49D2-B80A-C3EDD4082840"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-48:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "421D91C3-8AB3-45E1-9E55-13ED1A4A623E"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-56:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2D741945-8B0A-408D-A5FE-D5B38DC6D46A"
},
{
"criteria": "cpe:2.3:h:cisco:firepower_9300_sm-56_x_3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9308CA67-E949-4338-A890-22B3C4428D70"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}