{"vulnerability": "cve-2023-20185", "sightings": [{"uuid": "77cb6c0a-a4c5-48f5-9482-d843e9dcb2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116460864002205112", "content": "", "creation_timestamp": "2026-04-24T17:29:19.148027Z"}, {"uuid": "5ed1593c-cc43-4b4f-b41a-b80a0b93072b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/kasperskyb2b/737", "content": "\ud83e\ude79\ud83e\ude79\ud83e\ude79\u0421\u0432\u0435\u0436\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 Cisco\n\n\u0412 \u0438\u044e\u043b\u0435 Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 5 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439, \u0437\u0430\u043a\u0440\u044b\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyConnect/Security Client Software for Windows, Nexus 9000, WebEx, Duo Auth Proxy \u0438 BroadWorks.\n\nCVE-2023-20185 (CVSS 7.2) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f  ACI Multi-Site  \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 CloudSec. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442  \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438. \u0425\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u0451 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Cloudsec \u0438 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430.  \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e Cisco, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0438 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 ACI \u2014 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435. \n\nCVE-2023-20178 (CVSS 7.8) \u0432 Anyconnect \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e System, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0435\u0444\u0435\u043a\u0442 \u0432 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Cisco. \u0420\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u043e \u043f\u043e \u0441\u0447\u0430\u0441\u0442\u044c\u044e \u0434\u043b\u044f Anyconnect \u043e\u043d\u043e \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0431\u0435\u0437\u0431\u043e\u043b\u0435\u0437\u043d\u0435\u043d\u043d\u043e \u0438 \u0432 \u0446\u0435\u043b\u043e\u043c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.\n\n\u041f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Webex (CVE-2023-20133 \u0438 -20180, CVSS 5.4 \u0438 4.3) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c XSS- \u0438 CSRF-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 Webex Meetings, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044f \u0435\u0433\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0438 Webex, \u0438 \u0442.\u043f.  \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441, \u0432\u0441\u0451 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.\n\nCVE-2023-20210 (CVSS 6.0) - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e root \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 Cisco Broadworks. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0443\u0436\u043d\u044b \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041f\u0430\u0442\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Broadworks.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-07-10T08:41:10.000000Z"}, {"uuid": "4882fe20-6012-4af2-a22d-caf319605396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/JerusalemElectronicArmy/456", "content": "#\u0623\u062e\u0628\u0627\u0631_\u0627\u0644\u0633\u0627\u064a\u0628\u0631\n\n\u062a\u0635\u062f\u0631 Cisco \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0639\u0646 \u062b\u063a\u0631\u0629 \u0645\u064f\u0639\u0631\u0641\u0629 \u0628\u0627\u0644\u0631\u0645\u0632 CVE-2023-20185 \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0623\u062d\u062f \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062a\u0634\u0641\u064a\u0631 \u0641\u064a \u0645\u0646\u062a\u062c\u0627\u062a\u0647\u0627.\n#\u062c\u064a\u0634_\u0627\u0644\u0642\u062f\u0633_\u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a", "creation_timestamp": "2023-07-08T12:12:12.000000Z"}, {"uuid": "a29bab29-fec9-4dff-8291-665bf42103e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/true_secator/4586", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\nCVE-2023-20185 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f ACI Multi-Site CloudSec \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 Cisco Nexus \u0441\u0435\u0440\u0438\u0438 9000 \u0434\u043b\u044f \u0426\u041e\u0414\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b Cisco Nexus 9332C, 9364C \u0438 9500, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 ACI, \u044f\u0432\u043b\u044f\u044f\u0441\u044c \u0447\u0430\u0441\u0442\u044c\u044e \u043c\u043d\u043e\u0433\u043e\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0442\u043e\u043f\u043e\u043b\u043e\u0433\u0438\u0438, \u0438\u043c\u0435\u044e\u0442 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f CloudSec, \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 14.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0448\u0438\u0444\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f CloudSec \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0439 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0441\u0430\u0439\u0442\u044b.\n\nPSIRT \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e PoC \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443, \u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, Cisco \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2023-20185.\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0437\u0430 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041f\u0440\u0430\u0432\u0434\u0430, \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u043d\u0430 \u0443\u0436\u0435 \u0432\u0440\u044f\u0434 \u043b\u0438 \u043f\u043e\u043c\u043e\u0436\u0435\u0442.", "creation_timestamp": "2023-07-06T16:00:06.000000Z"}, {"uuid": "75c6eaa4-701c-44da-94ca-0e03158bc6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/cibsecurity/66558", "content": "\u203c CVE-2023-20185 \u203c\n\nA vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue with the implementation of the ciphers that are used by the CloudSec encryption feature on affected switches. An attacker with an on-path position between the ACI sites could exploit this vulnerability by intercepting intersite encrypted traffic and using cryptanalytic techniques to break the encryption. A successful exploit could allow the attacker to read or modify the traffic that is transmitted between the sites. Cisco has not released and will not release software updates that address this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T18:21:34.000000Z"}, {"uuid": "6daa5984-263d-4958-87e3-ced7e0ddc806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/xakep_ru/14319", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Cisco \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a\n\n\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043b\u044f \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-20185 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a. \u041f\u0430\u0442\u0447\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\nhttps://xakep.ru/2023/07/07/cve-2023-20185/", "creation_timestamp": "2023-07-07T17:13:50.000000Z"}, {"uuid": "35e63b46-340c-470d-9bc1-956f7d27d7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/hacking_Attack/108976", "content": "Black Hat Ethical Hacking\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic\n\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted TrafficPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nCisco issued a warning to its customers today regarding a high-severity vulnerability that affects certain data center switch models. Tracked as CVE-2023-20185, the flaw was discovered during internal security testing in the ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches.\n\nThe vulnerability specifically impacts Cisco Nexus 9332C, 9364C, and 9500 spine switches that are in ACI mode, part of a Multi-Site topology, have the CloudSec encryption feature enabled, and are running firmware 14.0 and later releases.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nIf successfully exploited, this vulnerability allows unauthorized attackers to tamper with encrypted traffic exchanged between sites remotely. The issue lies in the implementation of ciphers used by the CloudSec encryption feature on the affected switches. There is no patch available from Cisco.Currently, Cisco has not released software updates to address the CVE-2023-20185 vulnerability. As a precautionary measure, customers using the affected data center switches are advised to disable the vulnerable feature and consult their support organization for alternative solutions.\nTrending: Post-Exploitation Techniques: Maintaining Access, Escalating Privileges, Gathering Credentials, Covering Tracks Trending: Recon Tool: Logsensor Cisco\u2019s Product Security Incident Response Team (PSIRT) has not identified any signs of active exploitation or public exploit code targeting the vulnerability. Additionally, the company is actively working to patch a cross-site scripting (XSS) bug reported in the Prime Collaboration Deployment (PCD) server management tool.\nTrending: Mockingjay \u2013 A New Process Injection Technique that Bypasses EDR Detection Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-1-300x150.png TeamsPhisher Exploits Microsoft Teams Security Issue for File DeliveryJuly 6, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-46-300x150.png DDoSia Attack Tool Upgraded with Encryption, Concealed TargetingJuly 5, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-45-300x150.png Microsoft Refutes Allegations of Data Breach Involving 30 Million Customer Accounts by Anonymous Sudan HackersJuly 4, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-44-300x150.png Critical Zero-Day Vulnerability in \u2018Ultimate Member\u2019 WordPress Plugin Enables Cybercriminals to Compromise WebsitesJuly 3, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Cisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-01T20:00:55.227520Z"}, {"uuid": "1eaf9747-b944-45be-a19a-969eaca90d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/hacking_Attack/108976", "content": "Black Hat Ethical Hacking\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic\n\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted TrafficPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nCisco issued a warning to its customers today regarding a high-severity vulnerability that affects certain data center switch models. Tracked as CVE-2023-20185, the flaw was discovered during internal security testing in the ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches.\n\nThe vulnerability specifically impacts Cisco Nexus 9332C, 9364C, and 9500 spine switches that are in ACI mode, part of a Multi-Site topology, have the CloudSec encryption feature enabled, and are running firmware 14.0 and later releases.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nIf successfully exploited, this vulnerability allows unauthorized attackers to tamper with encrypted traffic exchanged between sites remotely. The issue lies in the implementation of ciphers used by the CloudSec encryption feature on the affected switches. There is no patch available from Cisco.Currently, Cisco has not released software updates to address the CVE-2023-20185 vulnerability. As a precautionary measure, customers using the affected data center switches are advised to disable the vulnerable feature and consult their support organization for alternative solutions.\nTrending: Post-Exploitation Techniques: Maintaining Access, Escalating Privileges, Gathering Credentials, Covering Tracks Trending: Recon Tool: Logsensor Cisco\u2019s Product Security Incident Response Team (PSIRT) has not identified any signs of active exploitation or public exploit code targeting the vulnerability. Additionally, the company is actively working to patch a cross-site scripting (XSS) bug reported in the Prime Collaboration Deployment (PCD) server management tool.\nTrending: Mockingjay \u2013 A New Process Injection Technique that Bypasses EDR Detection Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-1-300x150.png TeamsPhisher Exploits Microsoft Teams Security Issue for File DeliveryJuly 6, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-46-300x150.png DDoSia Attack Tool Upgraded with Encryption, Concealed TargetingJuly 5, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-45-300x150.png Microsoft Refutes Allegations of Data Breach Involving 30 Million Customer Accounts by Anonymous Sudan HackersJuly 4, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-44-300x150.png Critical Zero-Day Vulnerability in \u2018Ultimate Member\u2019 WordPress Plugin Enables Cybercriminals to Compromise WebsitesJuly 3, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Cisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-02T01:01:15.818759Z"}, {"uuid": "2f9891c6-b90e-475d-bf29-f0304737235b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/hacking_Attack/108976", "content": "Black Hat Ethical Hacking\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic\n\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted TrafficPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nCisco issued a warning to its customers today regarding a high-severity vulnerability that affects certain data center switch models. Tracked as CVE-2023-20185, the flaw was discovered during internal security testing in the ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches.\n\nThe vulnerability specifically impacts Cisco Nexus 9332C, 9364C, and 9500 spine switches that are in ACI mode, part of a Multi-Site topology, have the CloudSec encryption feature enabled, and are running firmware 14.0 and later releases.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nIf successfully exploited, this vulnerability allows unauthorized attackers to tamper with encrypted traffic exchanged between sites remotely. The issue lies in the implementation of ciphers used by the CloudSec encryption feature on the affected switches. There is no patch available from Cisco.Currently, Cisco has not released software updates to address the CVE-2023-20185 vulnerability. As a precautionary measure, customers using the affected data center switches are advised to disable the vulnerable feature and consult their support organization for alternative solutions.\nTrending: Post-Exploitation Techniques: Maintaining Access, Escalating Privileges, Gathering Credentials, Covering Tracks Trending: Recon Tool: Logsensor Cisco\u2019s Product Security Incident Response Team (PSIRT) has not identified any signs of active exploitation or public exploit code targeting the vulnerability. Additionally, the company is actively working to patch a cross-site scripting (XSS) bug reported in the Prime Collaboration Deployment (PCD) server management tool.\nTrending: Mockingjay \u2013 A New Process Injection Technique that Bypasses EDR Detection Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-1-300x150.png TeamsPhisher Exploits Microsoft Teams Security Issue for File DeliveryJuly 6, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-46-300x150.png DDoSia Attack Tool Upgraded with Encryption, Concealed TargetingJuly 5, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-45-300x150.png Microsoft Refutes Allegations of Data Breach Involving 30 Million Customer Accounts by Anonymous Sudan HackersJuly 4, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-44-300x150.png Critical Zero-Day Vulnerability in \u2018Ultimate Member\u2019 WordPress Plugin Enables Cybercriminals to Compromise WebsitesJuly 3, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Cisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-04T12:00:12.514891Z"}, {"uuid": "6a3fe75f-b098-4d9a-be2b-dfabe5c8c619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20185", "type": "seen", "source": "https://t.me/hacking_Attack/108976", "content": "Black Hat Ethical Hacking\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic\n\nCisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted TrafficPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nCisco issued a warning to its customers today regarding a high-severity vulnerability that affects certain data center switch models. Tracked as CVE-2023-20185, the flaw was discovered during internal security testing in the ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches.\n\nThe vulnerability specifically impacts Cisco Nexus 9332C, 9364C, and 9500 spine switches that are in ACI mode, part of a Multi-Site topology, have the CloudSec encryption feature enabled, and are running firmware 14.0 and later releases.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nIf successfully exploited, this vulnerability allows unauthorized attackers to tamper with encrypted traffic exchanged between sites remotely. The issue lies in the implementation of ciphers used by the CloudSec encryption feature on the affected switches. There is no patch available from Cisco.Currently, Cisco has not released software updates to address the CVE-2023-20185 vulnerability. As a precautionary measure, customers using the affected data center switches are advised to disable the vulnerable feature and consult their support organization for alternative solutions.\nTrending: Post-Exploitation Techniques: Maintaining Access, Escalating Privileges, Gathering Credentials, Covering Tracks Trending: Recon Tool: Logsensor Cisco\u2019s Product Security Incident Response Team (PSIRT) has not identified any signs of active exploitation or public exploit code targeting the vulnerability. Additionally, the company is actively working to patch a cross-site scripting (XSS) bug reported in the Prime Collaboration Deployment (PCD) server management tool.\nTrending: Mockingjay \u2013 A New Process Injection Technique that Bypasses EDR Detection Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-1-300x150.png TeamsPhisher Exploits Microsoft Teams Security Issue for File DeliveryJuly 6, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-46-300x150.png DDoSia Attack Tool Upgraded with Encryption, Concealed TargetingJuly 5, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-45-300x150.png Microsoft Refutes Allegations of Data Breach Involving 30 Million Customer Accounts by Anonymous Sudan HackersJuly 4, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-44-300x150.png Critical Zero-Day Vulnerability in \u2018Ultimate Member\u2019 WordPress Plugin Enables Cybercriminals to Compromise WebsitesJuly 3, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Cisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted Traffic first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-05T01:00:29.504357Z"}]}