CVE:CVE-2023-20216
CNNVD:CNNVD-202307-1716
Cisco BroadWorks是美国思科（Cisco）公司的一个运营商级统一通信软件平台。用于在任何类型的有线或无线网络架构上部署来自公共网络平台的云呼叫。
Cisco BroadWorks存在安全漏洞，该漏洞源于权限管理功能中存在漏洞，可能允许经过身份验证的本地攻击者在受影响的系统上将权限提升为root，以下产品和版本受到影响：BroadWorks Application Delivery Platform、BroadWorks Application Server、BroadWorks Database Server、BroadWorks Database Troubleshooting Server、BroadWorks Execution Server、BroadWorks Media Server、BroadWorks Messaging Server、BroadWorks Network Database Server、BroadWorks Network Function Manager、BroadWorks Network Server、BroadWorks Profile Server、BroadWorks Service Control Function Server、BroadWorks Sharing Server、BroadWorks Video Server、BroadWorks WebRTC Server、BroadWorks Xtended Services Platform。
solution:Upgrade cisco broadworks_application_delivery_platform to a higher version than ri.2023.05,and avoid the version (,ri.2023.05); Upgrade cisco broadworks_application_server to a higher version than 23.0.2023.05,2023.05,24.0.2023.05,and avoid the version (,23.0.2023.05),(,2023.05),[24.0,24.0.2023.05); Upgrade cisco broadworks_database_server to a higher version than 2023.05,and avoid the version (,2023.05); Upgrade cisco broadworks_execution_server to a higher version than 2023.05,and avoid the version (,2023.05); Upgrade cisco broadworks_media_server to a higher version than 2023.05,and avoid the version (,2023.05); Upgrade cisco broadworks_network_database_server to a higher version than 2023.05,and avoid the version (,2023.05); Upgrade cisco broadworks_network_function_manager to a higher version than 2023.05,and avoid the version (,2023.05); Upgrade cisco broadworks_network_server to a higher version than 23.0.2023.05,2023.05,and avoid the version (,23.0.2023.05),(,2023.05); Upgrade cisco broadworks_profile_server to a higher version than 23.0.2023.05,2023.05,and avoid the version (,23.0.2023.05),(,2023.05); Upgrade cisco broadworks_service_control_function_server to a higher version than 2023.05,and avoid the version (,2023.05); Upgrade cisco broadworks_troubleshooting_server to a higher version than 2023.06,and avoid the version (,2023.06); Upgrade cisco broadworks_xtended_services_platform to a higher version than 23.0.2023.05,2023.05,and avoid the version (,23.0.2023.05),(,2023.05)