CVE-2023-20097
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.
Key facts
- CVSS score
- 4.6 (v3.1)
- Severity
- MEDIUM
- CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N- Weakness (CWE)
- CWE-77
- EPSS score
- 0.2% (14th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2023-24276)
- Published
- March 23, 2023
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2023-24276 in the EU Vulnerability Database. Last updated in EUVD on October 25, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / aironet 1540
- cisco / aironet 1542d
- cisco / aironet 1542i
- cisco / aironet 1560
- cisco / aironet 1562d
- cisco / aironet 1562e
- cisco / aironet 1562i
- cisco / aironet 1800
- cisco / aironet 1800i
- cisco / aironet 1810
- cisco / aironet 1810w
- cisco / aironet 1815
- cisco / aironet 1815i
- cisco / aironet 1815m
- cisco / aironet 1815t
- cisco / aironet 1815w
- cisco / aironet 2800
- cisco / aironet 2800e
- cisco / aironet 2800i
- cisco / aironet 3800
- cisco / aironet 3800e
- cisco / aironet 3800i
- cisco / aironet 3800p
- cisco / aironet 4800
- cisco / aironet access point software
- cisco / catalyst 9100
- cisco / catalyst 9105
- cisco / catalyst 9105ax
- cisco / catalyst 9105axi
- cisco / catalyst 9105axw
- cisco / catalyst 9115
- cisco / catalyst 9115 ap
- cisco / catalyst 9115ax
- cisco / catalyst 9115axe
- cisco / catalyst 9115axi
- cisco / catalyst 9117
- cisco / catalyst 9117 ap
- cisco / catalyst 9117ax
- cisco / catalyst 9117axi
- cisco / catalyst 9120
- cisco / catalyst 9120 ap
- cisco / catalyst 9120ax
- cisco / catalyst 9120axe
- cisco / catalyst 9120axi
- cisco / catalyst 9120axp
- cisco / catalyst 9124
- cisco / catalyst 9124ax
- cisco / catalyst 9124axd
- cisco / catalyst 9124axi
- cisco / catalyst 9130
and 11 more…
Certified products that may be affected
21 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12 - Cisco Systems, Inc. - FIPS 140 4606 - historical
- Cisco Aironet 1562e/i/d/ps, 2802e/i, 3802e/i/p, 4800 and IW6300H- AC/DC/DCW Wireless LAN Access Points, AireOS Version 8.10MR3 and IOS-XE 17.3 - Cisco Systems, Inc. - FIPS 140 4129 - historical
- Cisco Aggregation Services Router 1000 Series (ASR1K), Cisco Cloud Services Router 1000V (CSR1000V), Cisco Integrated Services Router 1100 Series (ISR1100), Cisco Integrated Services Router 4200 Series (ISR4K) running IOS-XE 17.3 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11186-2021 - archived
- Cisco Catalyst Industrial Ethernet 3x00 Rugged Series (IE3200, IE3300, IE3400, IE3400H) Switches running IOS-XE 17.3 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11177-2021 - archived
- Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12 - Cisco Systems, Inc. - FIPS 140 3883 - historical
See all 21 in the Security Certifications Explorer.
References
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain