CVE-2023-20192

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write credentials on an affected system. Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details section of this advisory.

• CWE-20

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7bVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-priv-esc-Ls2B9t7bVendor Advisory

Published

Jun 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20187A vulnerability in the Multicast Leaf Recycle Elimination (m…7.5
• CVE-2023-20188A vulnerability in the web-based management interface of Cis…4.8
• CVE-2023-20189Multiple vulnerabilities in the web-based user interface of …9.8
• CVE-2023-2019A flaw was found in the Linux kernel's netdevsim device driv…4.4
• CVE-2023-20190A vulnerability in the classic access control list (ACL) com…5.3
• CVE-2023-20191A vulnerability in the access control list (ACL) processing …7.5
• CVE-2023-20193A vulnerability in the Embedded Service Router (ESR) of Cisc…6.7
• CVE-2023-20194A vulnerability in the ERS API of Cisco ISE could allow an a…4.9
• CVE-2023-20195Two vulnerabilities in Cisco ISE could allow an authenticate…7.2
• CVE-2023-20196Two vulnerabilities in Cisco ISE could allow an authenticate…7.2
• CVE-2023-20197A vulnerability in the filesystem image parser for Hierarchi…7.5
• CVE-2023-20198Cisco is providing an update for the ongoing investigation i…10