CVE-2023-20029

Cisco IOS XE Software Privilege Escalation Vulnerability

HIGH

7.8

CVSS Score

Published: March 23, 2023 at 12:00 AM UTC

Updated: June 17, 2026 at 05:29 AM UTC

47 products affected across 1 vendorIOS XeCatalyst 9300Catalyst 9300-48P-A

Using Cisco IOS XE Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe · Cisco

95%

17.7.1 17.8.1

cisco-catalyst-9200 (environment) · cisco-catalyst-9200cx (environment) · cisco-catalyst-9200l (environment) · cisco-catalyst-9300 (environment) · cisco-catalyst-9300-24p-a (environment) · cisco-catalyst-9300-24p-e (environment) · cisco-catalyst-9300-24s-a (environment) · cisco-catalyst-9300-24s-e (environment) · cisco-catalyst-9300-24t-a (environment) · cisco-catalyst-9300-24t-e (environment) · cisco-catalyst-9300-24u-a (environment) · cisco-catalyst-9300-24u-e (environment) · cisco-catalyst-9300-24ux-a (environment) · cisco-catalyst-9300-24ux-e (environment) · cisco-catalyst-9300-48p-a (environment) · cisco-catalyst-9300-48p-e (environment) · cisco-catalyst-9300-48s-a (environment) · cisco-catalyst-9300-48s-e (environment) · cisco-catalyst-9300-48t-a (environment) · cisco-catalyst-9300-48t-e (environment) · cisco-catalyst-9300-48u-a (environment) · cisco-catalyst-9300-48u-e (environment) · cisco-catalyst-9300-48un-a (environment) · cisco-catalyst-9300-48un-e (environment) · cisco-catalyst-9300-48uxm-a (environment) · cisco-catalyst-9300-48uxm-e (environment) · cisco-catalyst-9300l (environment) · cisco-catalyst-9300l-24p-4g-a (environment) · cisco-catalyst-9300l-24p-4g-e (environment) · cisco-catalyst-9300l-24p-4x-a (environment) · cisco-catalyst-9300l-24p-4x-e (environment) · cisco-catalyst-9300l-24t-4g-a (environment) · cisco-catalyst-9300l-24t-4g-e (environment) · cisco-catalyst-9300l-24t-4x-a (environment) · cisco-catalyst-9300l-24t-4x-e (environment) · cisco-catalyst-9300l-48p-4g-a (environment) · cisco-catalyst-9300l-48p-4g-e (environment) · cisco-catalyst-9300l-48p-4x-a (environment) · cisco-catalyst-9300l-48p-4x-e (environment) · cisco-catalyst-9300l-48t-4g-a (environment) · cisco-catalyst-9300l-48t-4g-e (environment) · cisco-catalyst-9300l-48t-4x-a (environment) · cisco-catalyst-9300l-48t-4x-e (environment) · cisco-catalyst-9300l-stack (environment) · cisco-catalyst-9300lm (environment) · cisco-catalyst-9300x (environment)

Catalyst 9200 · Ciscodevice

80%

All versions

Catalyst 9200Cx · Ciscodevice

80%

All versions

Catalyst 9200L · Ciscodevice

80%

All versions

Catalyst 9300 · Ciscodevice

80%

All versions