A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges.

published 2023-01-19 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-24222

cvss: 6.7; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 12%
public exploits: 0; none known

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.

Patch / fix

fixed in 1

cisco cx_cloud_agent 1.9

Exploit prediction

0.22% chance of exploitation in the next 30 days, higher than 12% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD	3.1	6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Cisco Cisco CX Cloud Agent

Classification

Weakness

CWE-708 Incorrect Ownership Assignment
CWE-276 Incorrect Default Permissions

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-cxagent-gOq9QjqZ
vendor-advisory

Sources

CVE List CVE-2023-20043
NVD CVE-2023-20043

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary