CVE-2023-20105

A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with Read-only credentials to elevate privileges to Administrator on an affected system. This vulnerability is due to incorrect handling of password change requests. An attacker could exploit this vulnerability by authenticating to the application as a Read-only user and sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device.

• CWE-20

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7bVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7bVendor Advisory

Published

Jun 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2010The Forminator WordPress plugin before 1.24.1 does not use a…3.1
• CVE-2023-20100A vulnerability in the access point (AP) joining process of …6.8
• CVE-2023-20101A vulnerability in Cisco Emergency Responder could allow an …9.8
• CVE-2023-20102A vulnerability in the web-based management interface of Cis…8.8
• CVE-2023-20103A vulnerability in Cisco Secure Network Analytics could allo…7.2
• CVE-2023-20104A vulnerability in the file upload functionality of Cisco We…6.1
• CVE-2023-20106Multiple vulnerabilities in Cisco Identity Services Engine (…3.8
• CVE-2023-20107A vulnerability in the deterministic random bit generator (D…7.5
• CVE-2023-20108A vulnerability in the XCP Authentication Service of the Cis…7.5
• CVE-2023-20109A vulnerability in the Cisco Group Encrypted Transport VPN (…6.6
• CVE-2023-20110A vulnerability in the web-based management interface of Cis…6.5
• CVE-2023-20111A vulnerability in the web-based management interface of Cis…6.5