{"uuid": "1eaf9747-b944-45be-a19a-969eaca90d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/hacking_Attack/108976", "content": "Black Hat Ethical Hacking\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic\n\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted TrafficPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nCisco issued a warning to its customers today regarding a high-severity vulnerability that affects certain data center switch models. Tracked as CVE-2023-20185, the flaw was discovered during internal security testing in the ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches.\n\nThe vulnerability specifically impacts Cisco Nexus 9332C, 9364C, and 9500 spine switches that are in ACI mode, part of a Multi-Site topology, have the CloudSec encryption feature enabled, and are running firmware 14.0 and later releases.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nIf successfully exploited, this vulnerability allows unauthorized attackers to tamper with encrypted traffic exchanged between sites remotely. The issue lies in the implementation of ciphers used by the CloudSec encryption feature on the affected switches. There is no patch available from Cisco.Currently, Cisco has not released software updates to address the CVE-2023-20185 vulnerability. As a precautionary measure, customers using the affected data center switches are advised to disable the vulnerable feature and consult their support organization for alternative solutions.\nTrending: Post-Exploitation Techniques: Maintaining Access, Escalating Privileges, Gathering Credentials, Covering Tracks Trending: Recon Tool: Logsensor Cisco\u2019s Product Security Incident Response Team (PSIRT) has not identified any signs of active exploitation or public exploit code targeting the vulnerability. Additionally, the company is actively working to patch a cross-site scripting (XSS) bug reported in the Prime Collaboration Deployment (PCD) server management tool.\nTrending: Mockingjay \u2013 A New Process Injection Technique that Bypasses EDR Detection Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-1-300x150.png TeamsPhisher Exploits Microsoft Teams Security Issue for File DeliveryJuly 6, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-46-300x150.png DDoSia Attack Tool Upgraded with Encryption, Concealed TargetingJuly 5, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-45-300x150.png Microsoft Refutes Allegations of Data Breach Involving 30 Million Customer Accounts by Anonymous Sudan HackersJuly 4, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-44-300x150.png Critical Zero-Day Vulnerability in \u2018Ultimate Member\u2019 WordPress Plugin Enables Cybercriminals to Compromise WebsitesJuly 3, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Cisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-02T01:01:15.818759Z"}