[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMCAt9DAJVa7sRPJXiKwoWM92PJrN7ES-LkSvR-lo43Y":3,"g5a-risk:CVE-2023-20040":124},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":46,"references":47,"referencesCount":53,"weaknesses":54,"weaknessesCount":46,"isActivelyExploited":68,"cisaInfo":27,"otxData":27,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":119,"notableEvents":120},"CVE-2023-20040","What is CVE-2023-20040?","A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of service (DoS) on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of the admin group.\r\n\r This vulnerability exists because user-supplied input is not properly validated when NETCONF is used to upload packages to an affected device. An attacker could exploit this vulnerability by uploading a specially crafted package file. A successful exploit could allow the attacker to write crafted files to arbitrary locations on the filesystem or delete arbitrary files from the filesystem of an affected device, resulting in a DoS condition. \r\n\r Note: By default, during install, Cisco NSO will be set up to run as the root user unless the --run-as-user option is used.","A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of servic...","2023-01-20T07:15:15.793","2024-01-25T17:15:26.757",5.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED","MEDIUM",null,1.2,4.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"ykramarz@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.01242,[34,34,34,34,34,34,34],"Medium",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"cisco","network_services_orchestrator","*","cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"5.8","cpe:2.3:a:cisco:network_services_orchestrator:5.8:*:*:*:*:*:*:*",2,[48],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-nso-path-trvsl-zjBeMkZg","Cisco",[52],"Vendor Advisory",1,[55,63],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",{"id":64,"name":65,"description":66,"extendedDescription":67,"status":60,"abstraction":61,"structure":62},"CWE-23","Relative Path Traversal","The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as \"..\" that can resolve to a location that is outside of that directory.","This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2023-20040? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-20040, a medium severity cyber security vulnerability from 2023. A vulnerability in the NETCONF service of Cisco Network S...","CVE-2023-20040, CVE-2023-20040 vulnerability, CVE-2023-20040 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, cisco security, network_services_orchestrator vulnerability","\u002Fwhat-is\u002Fcve-2023-20040",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-20040","Cybersecurity","CVE-2023-20040, CVE-2023-20040 vulnerability, CVE-2023-20040 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":27,"Negate":27,"Nodes":97},[98],{"Operator":99,"Negate":27,"CPEMatch":100},"OR",[101,105,109,113,117],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":102,"VersionStartExcluding":27,"VersionStartIncluding":103,"VersionEndExcluding":104,"VersionEndIncluding":27},"C4BE422F-6650-403F-A560-EBA884C15FAF","3.3","5.4.7",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":27},"DB986CDE-4BCD-4A2D-99DB-BE900BA7F58C","5.5","5.5.6",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":27},"C5ABFC42-5078-4C13-A912-A83C96E72D05","5.6","5.6.7",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":115,"VersionEndExcluding":116,"VersionEndIncluding":27},"93EC0F10-628A-42D7-BC3D-4110FB6F9D53","5.7","5.7.4",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DAF61782-327C-4318-A4D1-DCB18CD835B0",[],[],{"lastModified":11,"cacheTime":122,"version":123},1792372690300,"2.0",{"score":125,"band":126,"action":127,"scoredAt":128},21,"Low","Monitor","2026-10-16T06:56:55.245241+00:00"]