CVE-2023-20103 (secure_network_analytics)

A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device. This vulnerability is due to insufficient validation of user input to the web interface. An attacker could exploit this vulnerability by uploading a crafted file to an affected device. A successful exploit could allow the attacker to execute code on the affected device. To exploit this vulnerability, an attacker would need to have valid Administrator …

analytics cisco cisco secure cisco secure network analytics code credentials cve device exploit file input interface network network analytics root the web valid validation vulnerability web web interface