=====================================================================

                               CERT-Renater

                    Note d'Information No. 2023/VULN091

_____________________________________________________________________

DATE                : 23/02/2023

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Cisco Application Policy 
Infrastructure Controller (APIC), Cisco Cloud Network Controller,
                                  Cisco NX-OS,
                  Cisco Nexus 9000 Series Fabric Switches in ACI Mode,
                                  Cisco FXOS,
                               UCS Manager Software,         Cisco Nexus 
9300-FX3 Series FEX with UCS 6400, 6500 Series Fabric 
             Interconnects,
                            MDS 9000, Cisco Nexus,
Cisco products running Cisco NX-OS Software and configured for SSH 
authentication with X.509v3 certificates and remote authorization 
                        using TACACS+.

=====================================================================
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-csrfv-DMx6KSwV
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-lldp-dos-ySCNZOpX
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxfp-cmdinj-XXBZjtR
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-elyfex-dos-gfvcByx
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cli-cmdinject-euQVK9u
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-x509v3-unsupportedconfig-ScRtAbUk
_____________________________________________________________________


Below is the list of Cisco Security Advisories published by Cisco PSIRT 
on 2023-February-22.

The following PSIRT security advisories (2 High, 4 Medium, 1 
Informational) were published at 16:00 UTC today.

Table of Contents:

1) Cisco Application Policy Infrastructure Controller and Cisco Cloud 
Network Controller Cross-Site Request Forgery Vulnerability - SIR: High

2) Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer 
Discovery Protocol Memory Leak Denial of Service Vulnerability - SIR: High

3) Cisco FXOS Software and UCS Manager Software Configuration Backup 
Static Key Vulnerability - SIR: Medium

4) Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and 
UCS Fabric Interconnects Command Injection Vulnerability - SIR: Medium

5) Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric 
Interconnects Authentication Bypass Vulnerability - SIR: Medium

6) Cisco NX-OS Software CLI Command Injection Vulnerability - SIR: Medium

7) Cisco NX-OS Software SSH X.509v3 Certificate Authentication with 
Unsupported Remote Authorization Method Privilege Escalation Issues - 
SIR: Informational

+--------------------------------------------------------------------

1) Cisco Application Policy Infrastructure Controller and Cisco Cloud 
Network Controller Cross-Site Request Forgery Vulnerability

CVE-2023-20011

SIR: High

CVSS Score v(3.1): 8.8

URL: 
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-csrfv-DMx6KSwV 
["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-csrfv-DMx6KSwV"]

+--------------------------------------------------------------------

2) Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer 
Discovery Protocol Memory Leak Denial of Service Vulnerability

CVE-2023-20089

SIR: High

CVSS Score v(3.1): 7.4

URL: 
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-lldp-dos-ySCNZOpX 
["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-lldp-dos-ySCNZOpX"]

+--------------------------------------------------------------------

3) Cisco FXOS Software and UCS Manager Software Configuration Backup 
Static Key Vulnerability

CVE-2023-20016

SIR: Medium

CVSS Score v(3.1): 6.3

URL: 
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA 
["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA"]

+--------------------------------------------------------------------

4) Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and 
UCS Fabric Interconnects Command Injection Vulnerability

CVE-2023-20015

SIR: Medium

CVSS Score v(3.1): 6.0

URL: 
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxfp-cmdinj-XXBZjtR 
["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxfp-cmdinj-XXBZjtR"]

+--------------------------------------------------------------------

5) Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric 
Interconnects Authentication Bypass Vulnerability

CVE-2023-20012

SIR: Medium

CVSS Score v(3.1): 5.3

URL: 
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-elyfex-dos-gfvcByx 
["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-elyfex-dos-gfvcByx"]

+--------------------------------------------------------------------

6) Cisco NX-OS Software CLI Command Injection Vulnerability

CVE-2023-20050

SIR: Medium

CVSS Score v(3.1): 4.4

URL: 
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cli-cmdinject-euQVK9u 
["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cli-cmdinject-euQVK9u"]

+--------------------------------------------------------------------

7) Cisco NX-OS Software SSH X.509v3 Certificate Authentication with 
Unsupported Remote Authorization Method Privilege Escalation Issues

SIR: Informational

URL: 
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-x509v3-unsupportedconfig-ScRtAbUk 
["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-x509v3-unsupportedconfig-ScRtAbUk"]

=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================