What is CVE-2023-20029?

CVE-2023-20029 is a medium-severity vulnerability in Cisco Catalyst_9200, classified under Heap-based Buffer Overflow. CVSS score: 4.4/10. Published 2023-03-23.

How severe is CVE-2023-20029?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Buffer overflow in Cisco Catalyst_9200

CVE-2023-20029

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the…

Vulnerability class: Buffer Overflow

EPSS: 0.002 (6.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Cisco Catalyst_9200
Cisco Catalyst_9200cx
Cisco Catalyst_9200l
Cisco Catalyst_9300
Cisco Catalyst_9300-24p-a
Cisco Catalyst_9300-24p-e
Cisco Catalyst_9300-24s-a
Cisco Catalyst_9300-24s-e
Cisco Catalyst_9300-24t-a
Cisco Catalyst_9300-24t-e

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow

References

psirt@cisco.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-20029?: CVE-2023-20029 is a medium-severity vulnerability in Cisco Catalyst_9200, classified under Heap-based Buffer Overflow. CVSS score: 4.4/10. Published 2023-03-23.
How severe is CVE-2023-20029?: Medium severity. CVSS v3 base score is 4.4 out of 10.