CVE-2023-20075

EIP tracks 1 public exploit for CVE-2023-20075. PoCs published by ly1g3.

AI-analyzed exploit summary This repository provides a technical writeup detailing a local privilege escalation (LPE) vulnerability in Cisco AsyncOS 14.2.0 (ESA). The exploit leverages command injection in the `logcollector` CLI tool and a SUID binary (`runas`) to escalate from CLI access to root privileges.

Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.