CVE-2023-20238Network attack vector

Unauthenticated account takeover via forged SSO tokens

Published Sep 6, 2023 · Updated Dec 16, 2025

Authentication bypass in affected Cisco BroadWorks ADP and XSP releases allows remote attackers to forge SSO credentials and access systems. The SSO token-validation path accepts attacker-created tokens as authentic, allowing forged credentials to satisfy login checks. Exploitation requires a valid BroadWorks user ID and an enabled affected application; the forged account can place fraudulent calls or execute commands at that account's privilege level.

CVSS severity10.0
Critical
EPSS probability16.26%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Authentication bypass in affected Cisco BroadWorks ADP and XSP releases allows remote attackers to forge SSO credentials and access systems. The SSO token-validation path accepts attacker-created tokens as authentic, allowing forged credentials to satisfy login checks. Exploitation requires a valid BroadWorks user ID and an enabled affected application; the forged account can place fraudulent calls or execute commands at that account's privilege level.

The record

CVE
CVE-2023-20238
Published
Sep 6, 2023
Updated
Dec 16, 2025
Vendor
ClamAV
Product
Cisco BroadWorks
Classifications
CWE-287, T1190
Attack vector
network
Privileges
unauthenticated

Timeline

How it unfolded

  1. Sep 6, 2023CVE publishedPublication date reported by the CVE source.
  2. Dec 16, 2025Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=21.0 ap339395
  2. Affected versionversion=21.0 ap341897
  3. Affected versionversion=21.0 ap342145
  4. Affected versionversion=21.0 ap344752
  5. Affected versionversion=21.0 ap346128
  6. Affected versionversion=21.0 ap346902
  7. Affected versionversion=21.0 ap347064
  8. Affected versionversion=21.0 ap347640
  9. Affected versionversion=21.0 ap348945
  10. Affected versionversion=21.0 ap349066
  11. Affected versionversion=21.0 ap349850
  12. Affected versionversion=21.0 ap350032
  13. Affected versionversion=21.0 ap350111
  14. Affected versionversion=21.0 ap350204
  15. Affected versionversion=21.0 ap350308
  16. Affected versionversion=21.0 ap350760
  17. Affected versionversion=21.0 ap351261
  18. Affected versionversion=21.0 ap352182
  19. Affected versionversion=21.0 ap353841
  20. Affected versionversion=21.0 ap355616
  21. Affected versionversion=21.0 ap357571
  22. Affected versionversion=21.0 ap361559
  23. Affected versionversion=21.0 ap362637
  24. Affected versionversion=21.0 ap362825
  25. Affected versionversion=21.0 ap363301
  26. Affected versionversion=21.0 ap363408
  27. Affected versionversion=21.0 ap364358
  28. Affected versionversion=21.sp1 ap235252
  29. Affected versionversion=21.sp1 ap242300
  30. Affected versionversion=21.sp1 ap338964
  31. Affected versionversion=21.sp1 ap339196
  32. Affected versionversion=21.sp1 ap339376
  33. Affected versionversion=21.sp1 ap340545
  34. Affected versionversion=21.sp1 ap341645
  35. Affected versionversion=21.sp1 ap341683
  36. Affected versionversion=21.sp1 ap341897
  37. Affected versionversion=21.sp1 ap341909
  38. Affected versionversion=21.sp1 ap342214
  39. Affected versionversion=21.sp1 ap342461
  40. Affected versionversion=21.sp1 ap342625
  41. Affected versionversion=21.sp1 ap342755
  42. Affected versionversion=21.sp1 ap342853
  43. Affected versionversion=21.sp1 ap343352
  44. Affected versionversion=21.sp1 ap344270
  45. Affected versionversion=21.sp1 ap344301
  46. Affected versionversion=21.sp1 ap344479
  47. Affected versionversion=21.sp1 ap344681
  48. Affected versionversion=21.sp1 ap344783
  49. Affected versionversion=21.sp1 ap345054
  50. Affected versionversion=21.sp1 ap345293
  51. Affected versionversion=21.sp1 ap345755
  52. Affected versionversion=21.sp1 ap346074
  53. Affected versionversion=21.sp1 ap346270
  54. Affected versionversion=21.sp1 ap346351
  55. Affected versionversion=21.sp1 ap347928
  56. Affected versionversion=21.sp1 ap348143
  57. Affected versionversion=21.sp1 ap348472
  58. Affected versionversion=21.sp1 ap349090
  59. Affected versionversion=21.sp1 ap349222
  60. Affected versionversion=21.sp1 ap349517
  61. Affected versionversion=21.sp1 ap350050
  62. Affected versionversion=21.sp1 ap350189
  63. Affected versionversion=21.sp1 ap351216
  64. Affected versionversion=21.sp1 ap351248
  65. Affected versionversion=21.sp1 ap351295
  66. Affected versionversion=21.sp1 ap351315
  67. Affected versionversion=21.sp1 ap351530
  68. Affected versionversion=21.sp1 ap351738
  69. Affected versionversion=21.sp1 ap351754
  70. Affected versionversion=21.sp1 ap351795
  71. Affected versionversion=21.sp1 ap351898
  72. Affected versionversion=21.sp1 ap352082
  73. Affected versionversion=21.sp1 ap352205
  74. Affected versionversion=21.sp1 ap352304
  75. Affected versionversion=21.sp1 ap352972
  76. Affected versionversion=21.sp1 ap353418
  77. Affected versionversion=21.sp1 ap353841
  78. Affected versionversion=21.sp1 ap354194
  79. Affected versionversion=21.sp1 ap354707
  80. Affected versionversion=21.sp1 ap355717
  81. Affected versionversion=21.sp1 ap356271
  82. Affected versionversion=21.sp1 ap356787
  83. Affected versionversion=21.sp1 ap357347
  84. Affected versionversion=21.sp1 ap357574
  85. Affected versionversion=21.sp1 ap358132
  86. Affected versionversion=21.sp1 ap358730
  87. Affected versionversion=21.sp1 ap360211
  88. Affected versionversion=21.sp1 ap360306
  89. Affected versionversion=21.sp1 ap361420
  90. Affected versionversion=21.sp1 ap364778
  91. Affected versionversion=21.sp1 ap365379
  92. Affected versionversion=21.sp1 ap365390
  93. Affected versionversion=21.sp1 ap366348
  94. Affected versionversion=21.sp1 ap370908
  95. Affected versionversion=21.sp1 ap371281
  96. Affected versionversion=21.sp1 ap372422
  97. Affected versionversion=21.sp1 ap373102
  98. Affected versionversion=21.sp1 ap374822
  99. Affected versionversion=21.sp1 ap375026
  100. Affected versionversion=21.sp1 ap375053
  101. Affected versionversion=21.sp1 ap379493
  102. Affected versionversion=21.sp1 ap380506
  103. Affected versionversion=21.sp9 ap360116
  104. Affected versionversion=21.sp9 ap367207
  105. Affected versionversion=22.0
  106. Affected versionversion=22.0 ap342836
  107. Affected versionversion=22.0 ap345032
  108. Affected versionversion=22.0 ap346307
  109. Affected versionversion=22.0 ap347741
  110. Affected versionversion=22.0 ap348945
  111. Affected versionversion=22.0 ap349201
  112. Affected versionversion=22.0 ap350179
  113. Affected versionversion=22.0 ap350217
  114. Affected versionversion=22.0 ap350573
  115. Affected versionversion=22.0 ap351263
  116. Affected versionversion=22.0 ap351700
  117. Affected versionversion=22.0 ap352109
  118. Affected versionversion=22.0 ap352205
  119. Affected versionversion=22.0 ap352516
  120. Affected versionversion=22.0 ap352703
  121. Affected versionversion=22.0 ap352726
  122. Affected versionversion=22.0 ap352932
  123. Affected versionversion=22.0 ap352962
  124. Affected versionversion=22.0 ap352972
  125. Affected versionversion=22.0 ap353311
  126. Affected versionversion=22.0 ap353360
  127. Affected versionversion=22.0 ap353384
  128. Affected versionversion=22.0 ap353418
  129. Affected versionversion=22.0 ap353490
  130. Affected versionversion=22.0 ap353577
  131. Affected versionversion=22.0 ap353681
  132. Affected versionversion=22.0 ap353915
  133. Affected versionversion=22.0 ap353975
  134. Affected versionversion=22.0 ap354069
  135. Affected versionversion=22.0 ap354070
  136. Affected versionversion=22.0 ap354090
  137. Affected versionversion=22.0 ap354098
  138. Affected versionversion=22.0 ap354313
  139. Affected versionversion=22.0 ap354413
  140. Affected versionversion=22.0 ap354597
  141. Affected versionversion=22.0 ap354785
  142. Affected versionversion=22.0 ap354921
  143. Affected versionversion=22.0 ap354936
  144. Affected versionversion=22.0 ap355083
  145. Affected versionversion=22.0 ap355091
  146. Affected versionversion=22.0 ap355285
  147. Affected versionversion=22.0 ap355300
  148. Affected versionversion=22.0 ap355365
  149. Affected versionversion=22.0 ap355385
  150. Affected versionversion=22.0 ap355674
  151. Affected versionversion=22.0 ap355757
  152. Affected versionversion=22.0 ap355894
  153. Affected versionversion=22.0 ap355905
  154. Affected versionversion=22.0 ap355922
  155. Affected versionversion=22.0 ap356140
  156. Affected versionversion=22.0 ap356359
  157. Affected versionversion=22.0 ap356390
  158. Affected versionversion=22.0 ap356434
  159. Affected versionversion=22.0 ap356458
  160. Affected versionversion=22.0 ap356474
  161. Affected versionversion=22.0 ap356603
  162. Affected versionversion=22.0 ap356706
  163. Affected versionversion=22.0 ap356848
  164. Affected versionversion=22.0 ap357047
  165. Affected versionversion=22.0 ap357400
  166. Affected versionversion=22.0 ap357447
  167. Affected versionversion=22.0 ap357506
  168. Affected versionversion=22.0 ap357560
  169. Affected versionversion=22.0 ap357607
  170. Affected versionversion=22.0 ap357632
  171. Affected versionversion=22.0 ap357645
  172. Affected versionversion=22.0 ap357768
  173. Affected versionversion=22.0 ap357769
  174. Affected versionversion=22.0 ap357859
  175. Affected versionversion=22.0 ap358234
  176. Affected versionversion=22.0 ap358246
  177. Affected versionversion=22.0 ap358357
  178. Affected versionversion=22.0 ap358454
  179. Affected versionversion=22.0 ap358469
  180. Affected versionversion=22.0 ap358563
  181. Affected versionversion=22.0 ap358887
  182. Affected versionversion=22.0 ap358971
  183. Affected versionversion=22.0 ap359049
  184. Affected versionversion=22.0 ap359156
  185. Affected versionversion=22.0 ap359429
  186. Affected versionversion=22.0 ap359433
  187. Affected versionversion=22.0 ap359465
  188. Affected versionversion=22.0 ap359470
  189. Affected versionversion=22.0 ap359549
  190. Affected versionversion=22.0 ap359644
  191. Affected versionversion=22.0 ap359748
  192. Affected versionversion=22.0 ap359765
  193. Affected versionversion=22.0 ap359972
  194. Affected versionversion=22.0 ap359991
  195. Affected versionversion=22.0 ap360116
  196. Affected versionversion=22.0 ap360184
  197. Affected versionversion=22.0 ap360201
  198. Affected versionversion=22.0 ap360244
  199. Affected versionversion=22.0 ap360250
  200. Affected versionversion=22.0 ap360564
  201. Affected versionversion=22.0 ap360817
  202. Affected versionversion=22.0 ap360904
  203. Affected versionversion=22.0 ap360912
  204. Affected versionversion=22.0 ap361153
  205. Affected versionversion=22.0 ap361154
  206. Affected versionversion=22.0 ap361445
  207. Affected versionversion=22.0 ap361520
  208. Affected versionversion=22.0 ap361533
  209. Affected versionversion=22.0 ap361559
  210. Affected versionversion=22.0 ap361560
  211. Affected versionversion=22.0 ap361820
  212. Affected versionversion=22.0 ap362001
  213. Affected versionversion=22.0 ap362163
  214. Affected versionversion=22.0 ap362276
  215. Affected versionversion=22.0 ap362328
  216. Affected versionversion=22.0 ap362490
  217. Affected versionversion=22.0 ap362771
  218. Affected versionversion=22.0 ap362799
  219. Affected versionversion=22.0 ap362848
  220. Affected versionversion=22.0 ap363332
  221. Affected versionversion=22.0 ap363363
  222. Affected versionversion=22.0 ap363521
  223. Affected versionversion=22.0 ap363568
  224. Affected versionversion=22.0 ap363596
  225. Affected versionversion=22.0 ap363729
  226. Affected versionversion=22.0 ap363759
  227. Affected versionversion=22.0 ap363770
  228. Affected versionversion=22.0 ap363815
  229. Affected versionversion=22.0 ap364199
  230. Affected versionversion=22.0 ap364473
  231. Affected versionversion=22.0 ap364521
  232. Affected versionversion=22.0 ap364781
  233. Affected versionversion=22.0 ap364797
  234. Affected versionversion=22.0 ap364844
  235. Affected versionversion=22.0 ap364932
  236. Affected versionversion=22.0 ap365115
  237. Affected versionversion=22.0 ap365146
  238. Affected versionversion=22.0 ap365172
  239. Affected versionversion=22.0 ap365173
  240. Affected versionversion=22.0 ap365223
  241. Affected versionversion=22.0 ap365400
  242. Affected versionversion=22.0 ap365449
  243. Affected versionversion=22.0 ap365545
  244. Affected versionversion=22.0 ap365597
  245. Affected versionversion=22.0 ap365601
  246. Affected versionversion=22.0 ap365632
  247. Affected versionversion=22.0 ap365685
  248. Affected versionversion=22.0 ap365727
  249. Affected versionversion=22.0 ap365730
  250. Affected versionversion=22.0 ap365758
  251. Affected versionversion=22.0 ap365779
  252. Affected versionversion=22.0 ap365800
  253. Affected versionversion=22.0 ap365801
  254. Affected versionversion=22.0 ap365905
  255. Affected versionversion=22.0 ap365920
  256. Affected versionversion=22.0 ap366174
  257. Affected versionversion=22.0 ap366180
  258. Affected versionversion=22.0 ap366358
  259. Affected versionversion=22.0 ap366649
  260. Affected versionversion=22.0 ap366656
  261. Affected versionversion=22.0 ap366701
  262. Affected versionversion=22.0 ap366744
  263. Affected versionversion=22.0 ap366882
  264. Affected versionversion=22.0 ap366898
  265. Affected versionversion=22.0 ap366916
  266. Affected versionversion=22.0 ap367109
  267. Affected versionversion=22.0 ap367291
  268. Affected versionversion=22.0 ap367367
  269. Affected versionversion=22.0 ap367396
  270. Affected versionversion=22.0 ap367434
  271. Affected versionversion=22.0 ap367453
  272. Affected versionversion=22.0 ap367524
  273. Affected versionversion=22.0 ap367732
  274. Affected versionversion=22.0 ap367874
  275. Affected versionversion=22.0 ap368026
  276. Affected versionversion=22.0 ap368087
  277. Affected versionversion=22.0 ap368125
  278. Affected versionversion=22.0 ap368180
  279. Affected versionversion=22.0 ap368216
  280. Affected versionversion=22.0 ap368326
  281. Affected versionversion=22.0 ap368422
  282. Affected versionversion=22.0 ap368604
  283. Affected versionversion=22.0 ap368695
  284. Affected versionversion=22.0 ap368913
  285. Affected versionversion=22.0 ap368987
  286. Affected versionversion=22.0 ap369173
  287. Affected versionversion=22.0 ap369219
  288. Affected versionversion=22.0 ap369227
  289. Affected versionversion=22.0 ap369550
  290. Affected versionversion=22.0 ap369571
  291. Affected versionversion=22.0 ap369641
  292. Affected versionversion=22.0 ap369668
  293. Affected versionversion=22.0 ap369674
  294. Affected versionversion=22.0 ap369774
  295. Affected versionversion=22.0 ap369863
  296. Affected versionversion=22.0 ap369881
  297. Affected versionversion=22.0 ap369931
  298. Affected versionversion=22.0 ap369934
  299. Affected versionversion=22.0 ap370138
  300. Affected versionversion=22.0 ap370180
  301. Affected versionversion=22.0 ap370269
  302. Affected versionversion=22.0 ap370358
  303. Affected versionversion=22.0 ap370389
  304. Affected versionversion=22.0 ap370424
  305. Affected versionversion=22.0 ap370459
  306. Affected versionversion=22.0 ap370544
  307. Affected versionversion=22.0 ap370545
  308. Affected versionversion=22.0 ap370590
  309. Affected versionversion=22.0 ap370615
  310. Affected versionversion=22.0 ap370636
  311. Affected versionversion=22.0 ap370654
  312. Affected versionversion=22.0 ap370675
  313. Affected versionversion=22.0 ap370737
  314. Affected versionversion=22.0 ap371033
  315. Affected versionversion=22.0 ap371313
  316. Affected versionversion=22.0 ap371437
  317. Affected versionversion=22.0 ap371467
  318. Affected versionversion=22.0 ap371583
  319. Affected versionversion=22.0 ap371587
  320. Affected versionversion=22.0 ap371656
  321. Affected versionversion=22.0 ap371681
  322. Affected versionversion=22.0 ap371871
  323. Affected versionversion=22.0 ap371911
  324. Affected versionversion=22.0 ap371961
  325. Affected versionversion=22.0 ap372016
  326. Affected versionversion=22.0 ap372024
  327. Affected versionversion=22.0 ap372043
  328. Affected versionversion=22.0 ap372072
  329. Affected versionversion=22.0 ap372152
  330. Affected versionversion=22.0 ap372177
  331. Affected versionversion=22.0 ap372243
  332. Affected versionversion=22.0 ap372354
  333. Affected versionversion=22.0 ap372371
  334. Affected versionversion=22.0 ap372390
  335. Affected versionversion=22.0 ap372433
  336. Affected versionversion=22.0 ap372504
  337. Affected versionversion=22.0 ap372643
  338. Affected versionversion=22.0 ap372706
  339. Affected versionversion=22.0 ap372708
  340. Affected versionversion=22.0 ap372750
  341. Affected versionversion=22.0 ap372757
  342. Affected versionversion=22.0 ap372799
  343. Affected versionversion=22.0 ap372845
  344. Affected versionversion=22.0 ap372956
  345. Affected versionversion=22.0 ap372963
  346. Affected versionversion=22.0 ap373018
  347. Affected versionversion=22.0 ap373046
  348. Affected versionversion=22.0 ap373098
  349. Affected versionversion=22.0 ap373108
  350. Affected versionversion=22.0 ap373111
  351. Affected versionversion=22.0 ap373118
  352. Affected versionversion=22.0 ap373122
  353. Affected versionversion=22.0 ap373438
  354. Affected versionversion=22.0 ap373452
  355. Affected versionversion=22.0 ap373539
  356. Affected versionversion=22.0 ap373684
  357. Affected versionversion=22.0 ap373820
  358. Affected versionversion=22.0 ap373855
  359. Affected versionversion=22.0 ap373899
  360. Affected versionversion=22.0 ap373954
  361. Affected versionversion=22.0 ap374114
  362. Affected versionversion=22.0 ap374230
  363. Affected versionversion=22.0 ap374269
  364. Affected versionversion=22.0 ap374330
  365. Affected versionversion=22.0 ap374334
  366. Affected versionversion=22.0 ap374339
  367. Affected versionversion=22.0 ap374356
  368. Affected versionversion=22.0 ap374428
  369. Affected versionversion=22.0 ap374460
  370. Affected versionversion=22.0 ap374507
  371. Affected versionversion=22.0 ap374596
  372. Affected versionversion=22.0 ap374660
  373. Affected versionversion=22.0 ap374803
  374. Affected versionversion=22.0 ap374895
  375. Affected versionversion=22.0 ap374971
  376. Affected versionversion=22.0 ap375018
  377. Affected versionversion=22.0 ap375069
  378. Affected versionversion=22.0 ap375090
  379. Affected versionversion=22.0 ap375091
  380. Affected versionversion=22.0 ap375345
  381. Affected versionversion=22.0 ap375354
  382. Affected versionversion=22.0 ap375383
  383. Affected versionversion=22.0 ap375465
  384. Affected versionversion=22.0 ap375634
  385. Affected versionversion=22.0 ap375685
  386. Affected versionversion=22.0 ap375688
  387. Affected versionversion=22.0 ap375719
  388. Affected versionversion=22.0 ap375743
  389. Affected versionversion=22.0 ap375862
  390. Affected versionversion=22.0 ap375924
  391. Affected versionversion=22.0 ap375937
  392. Affected versionversion=22.0 ap376041
  393. Affected versionversion=22.0 ap376100
  394. Affected versionversion=22.0 ap376181
  395. Affected versionversion=22.0 ap376298
  396. Affected versionversion=22.0 ap376410
  397. Affected versionversion=22.0 ap376416
  398. Affected versionversion=22.0 ap376429
  399. Affected versionversion=22.0 ap376531
  400. Affected versionversion=22.0 ap376541
  401. Affected versionversion=22.0 ap376614
  402. Affected versionversion=22.0 ap376620
  403. Affected versionversion=22.0 ap376652
  404. Affected versionversion=22.0 ap376661
  405. Affected versionversion=22.0 ap376668
  406. Affected versionversion=22.0 ap376701
  407. Affected versionversion=22.0 ap376710
  408. Affected versionversion=22.0 ap377068
  409. Affected versionversion=22.0 ap377149
  410. Affected versionversion=22.0 ap377307
  411. Affected versionversion=22.0 ap377384
  412. Affected versionversion=22.0 ap377412
  413. Affected versionversion=22.0 ap377480
  414. Affected versionversion=22.0 ap377494
  415. Affected versionversion=22.0 ap377566
  416. Affected versionversion=22.0 ap377577
  417. Affected versionversion=22.0 ap377581
  418. Affected versionversion=22.0 ap377757
  419. Affected versionversion=22.0 ap377779
  420. Affected versionversion=22.0 ap378079
  421. Affected versionversion=22.0 ap378332
  422. Affected versionversion=22.0 ap378405
  423. Affected versionversion=22.0 ap378440
  424. Affected versionversion=22.0 ap378471
  425. Affected versionversion=22.0 ap378509
  426. Affected versionversion=22.0 ap378581
  427. Affected versionversion=22.0 ap378585
  428. Affected versionversion=22.0 ap378866
  429. Affected versionversion=22.0 ap378882
  430. Affected versionversion=22.0 ap378953
  431. Affected versionversion=22.0 ap378999
  432. Affected versionversion=22.0 ap379008
  433. Affected versionversion=22.0 ap379016
  434. Affected versionversion=22.0 ap379374
  435. Affected versionversion=22.0 ap379389
  436. Affected versionversion=22.0 ap379487
  437. Affected versionversion=22.0 ap379597
  438. Affected versionversion=22.0 ap379694
  439. Affected versionversion=22.0 ap379780
  440. Affected versionversion=22.0 ap379795
  441. Affected versionversion=22.0 ap379833
  442. Affected versionversion=22.0 ap379838
  443. Affected versionversion=22.0 ap379972
  444. Affected versionversion=22.0 ap380041
  445. Affected versionversion=22.0 ap380117
  446. Affected versionversion=22.0 ap380143
  447. Affected versionversion=22.0 ap380187
  448. Affected versionversion=22.0 ap380391
  449. Affected versionversion=22.0 ap380473
  450. Affected versionversion=22.0 ap380486
  451. Affected versionversion=22.0 ap380535
  452. Affected versionversion=22.0 ap380629
  453. Affected versionversion=22.0 ap380751
  454. Affected versionversion=22.0 ap380771
  455. Affected versionversion=22.0 ap381091
  456. Affected versionversion=22.0 ap381118
  457. Affected versionversion=22.0 ap381136
  458. Affected versionversion=22.0 ap381243
  459. Affected versionversion=22.0 ap381584
  460. Affected versionversion=22.0 ap381594
  461. Affected versionversion=22.0 ap381732
  462. Affected versionversion=22.0 ap382158
  463. Affected versionversion=22.0 ap382192
  464. Affected versionversion=22.0 ap382240
  465. Affected versionversion=22.0 ap382251
  466. Affected versionversion=22.0 ap382358
  467. Affected versionversion=22.0 ap382362
  468. Affected versionversion=22.0 ap382434
  469. Affected versionversion=22.0 ap382487
  470. Affected versionversion=22.0 ap382488
  471. Affected versionversion=22.0 ap382717
  472. Affected versionversion=22.0 ap382977
  473. Affected versionversion=22.0 ap383002
  474. Affected versionversion=22.0 ap383134
  475. Affected versionversion=22.0 ap383170
  476. Affected versionversion=22.0 ap383309
  477. Affected versionversion=22.0 ap383514
  478. Affected versionversion=22.0 ap383569
  479. Affected versionversion=22.0 ap383710
  480. Affected versionversion=23.0
  481. Affected versionversion=23.0 ap360007
  482. Affected versionversion=23.0 ap363128
  483. Affected versionversion=23.0 ap366358
  484. Affected versionversion=23.0 ap366677
  485. Affected versionversion=23.0 ap366803
  486. Affected versionversion=23.0 ap367332
  487. Affected versionversion=23.0 ap367874
  488. Affected versionversion=23.0 ap367974
  489. Affected versionversion=23.0 ap367998
  490. Affected versionversion=23.0 ap368445
  491. Affected versionversion=23.0 ap369227
  492. Affected versionversion=23.0 ap369295
  493. Affected versionversion=23.0 ap369529
  494. Affected versionversion=23.0 ap369881
  495. Affected versionversion=23.0 ap370193
  496. Affected versionversion=23.0 ap370911
  497. Affected versionversion=23.0 ap370952
  498. Affected versionversion=23.0 ap371155
  499. Affected versionversion=23.0 ap371436
  500. Affected versionversion=23.0 ap371681
  501. Affected versionversion=23.0 ap371682
  502. Affected versionversion=23.0 ap371775
  503. Affected versionversion=23.0 ap372337
  504. Affected versionversion=23.0 ap372389
  505. Affected versionversion=23.0 ap372706
  506. Affected versionversion=23.0 ap372708
  507. Affected versionversion=23.0 ap373015
  508. Affected versionversion=23.0 ap373034
  509. Affected versionversion=23.0 ap373299
  510. Affected versionversion=23.0 ap373391
  511. Affected versionversion=23.0 ap373539
  512. Affected versionversion=23.0 ap373562
  513. Affected versionversion=23.0 ap373899
  514. Affected versionversion=23.0 ap374324
  515. Affected versionversion=23.0 ap374971
  516. Affected versionversion=23.0 ap375003
  517. Affected versionversion=23.0 ap375097
  518. Affected versionversion=23.0 ap375449
  519. Affected versionversion=23.0 ap375661
  520. Affected versionversion=23.0 ap375720
  521. Affected versionversion=23.0 ap375908
  522. Affected versionversion=23.0 ap376041
  523. Affected versionversion=23.0 ap376179
  524. Affected versionversion=23.0 ap376252
  525. Affected versionversion=23.0 ap376410
  526. Affected versionversion=23.0 ap376426
  527. Affected versionversion=23.0 ap376429
  528. Affected versionversion=23.0 ap376485
  529. Affected versionversion=23.0 ap376614
  530. Affected versionversion=23.0 ap376620
  531. Affected versionversion=23.0 ap376671
  532. Affected versionversion=23.0 ap376935
  533. Affected versionversion=23.0 ap377149
  534. Affected versionversion=23.0 ap377494
  535. Affected versionversion=23.0 ap377515
  536. Affected versionversion=23.0 ap377516
  537. Affected versionversion=23.0 ap377578
  538. Affected versionversion=23.0 ap377984
  539. Affected versionversion=23.0 ap378025
  540. Affected versionversion=23.0 ap378218
  541. Affected versionversion=23.0 ap378257
  542. Affected versionversion=23.0 ap378863
  543. Affected versionversion=23.0 ap378882
  544. Affected versionversion=23.0 ap379326
  545. Affected versionversion=23.0 ap379888
  546. Affected versionversion=23.0 ap380161
  547. Affected versionversion=23.0 ap380180
  548. Affected versionversion=23.0 ap380446
  549. Affected versionversion=23.0 ap380473
  550. Affected versionversion=23.0 ap380512
  551. Affected versionversion=23.0 ap380537
  552. Affected versionversion=23.0 ap380783
  553. Affected versionversion=23.0 ap381072
  554. Affected versionversion=23.0 ap381088
  555. Affected versionversion=23.0 ap381091
  556. Affected versionversion=23.0 ap381498
  557. Affected versionversion=23.0 ap381584
  558. Affected versionversion=23.0 ap381781
  559. Affected versionversion=23.0 ap382053
  560. Affected versionversion=23.0 ap382253
  561. Affected versionversion=23.0 ap382362
  562. Affected versionversion=23.0 ap382487
  563. Affected versionversion=23.0 ap382709
  564. Affected versionversion=23.0 ap382717
  565. Affected versionversion=23.0 ap382992
  566. Affected versionversion=23.0 ap383168
  567. Affected versionversion=23.0 ap383594
  568. Affected versionversion=23.0 ap383785
  569. Affected versionversion=23.0 ap384428
  570. Affected versionversion=23.0 ap384431
  571. Affected versionversion=RI.2021.02
  572. Affected versionversion=RI.2021.08
  573. Affected versionversion=RI.2021.09
  574. Affected versionversion=RI.2021.10
  575. Affected versionversion=RI.2021.11
  576. Affected versionversion=RI.2021.12
  577. Affected versionversion=RI.2022.02
  578. Affected versionversion=RI.2022.03
  579. Affected versionversion=RI.2022.04
  580. Affected versionversion=RI.2022.05
  581. Affected versionversion=RI.2022.06
  582. Affected versionversion=RI.2022.07
  583. Affected versionversion=RI.2022.08
  584. Affected versionversion=RI.2022.09
  585. Affected versionversion=RI.2022.10
  586. Affected versionversion=RI.2022.12
  587. Affected versionversion=RI.2023.01
  588. Affected versionversion=RI.2023.02
  589. Affected versionversion=RI.2023.03
  590. Affected versionversion=RI.2023.04
  591. Affected versionversion=RI.2023.05
  592. Affected versionversion=RI.2023.07

What conditions does exploitation require?

Attack vectornetwork
Required privilegesunauthenticated

What is affected?

ClamAV · Cisco BroadWorksversion=21.0 ap339395; version=21.0 ap341897; version=21.0 ap342145; version=21.0 ap344752; version=21.0 ap346128; version=21.0 ap346902; version=21.0 ap347064; version=21.0 ap347640; version=21.0 ap348945; version=21.0 ap349066; version=21.0 ap349850; version=21.0 ap350032; version=21.0 ap350111; version=21.0 ap350204; version=21.0 ap350308; version=21.0 ap350760; version=21.0 ap351261; version=21.0 ap352182; version=21.0 ap353841; version=21.0 ap355616; version=21.0 ap357571; version=21.0 ap361559; version=21.0 ap362637; version=21.0 ap362825; version=21.0 ap363301; version=21.0 ap363408; version=21.0 ap364358; version=21.sp1 ap235252; version=21.sp1 ap242300; version=21.sp1 ap338964; version=21.sp1 ap339196; version=21.sp1 ap339376; version=21.sp1 ap340545; version=21.sp1 ap341645; version=21.sp1 ap341683; version=21.sp1 ap341897; version=21.sp1 ap341909; version=21.sp1 ap342214; version=21.sp1 ap342461; version=21.sp1 ap342625; version=21.sp1 ap342755; version=21.sp1 ap342853; version=21.sp1 ap343352; version=21.sp1 ap344270; version=21.sp1 ap344301; version=21.sp1 ap344479; version=21.sp1 ap344681; version=21.sp1 ap344783; version=21.sp1 ap345054; version=21.sp1 ap345293; version=21.sp1 ap345755; version=21.sp1 ap346074; version=21.sp1 ap346270; version=21.sp1 ap346351; version=21.sp1 ap347928; version=21.sp1 ap348143; version=21.sp1 ap348472; version=21.sp1 ap349090; version=21.sp1 ap349222; version=21.sp1 ap349517; version=21.sp1 ap350050; version=21.sp1 ap350189; version=21.sp1 ap351216; version=21.sp1 ap351248; version=21.sp1 ap351295; version=21.sp1 ap351315; version=21.sp1 ap351530; version=21.sp1 ap351738; version=21.sp1 ap351754; version=21.sp1 ap351795; version=21.sp1 ap351898; version=21.sp1 ap352082; version=21.sp1 ap352205; version=21.sp1 ap352304; version=21.sp1 ap352972; version=21.sp1 ap353418; version=21.sp1 ap353841; version=21.sp1 ap354194; version=21.sp1 ap354707; version=21.sp1 ap355717; version=21.sp1 ap356271; version=21.sp1 ap356787; version=21.sp1 ap357347; version=21.sp1 ap357574; version=21.sp1 ap358132; version=21.sp1 ap358730; version=21.sp1 ap360211; version=21.sp1 ap360306; version=21.sp1 ap361420; version=21.sp1 ap364778; version=21.sp1 ap365379; version=21.sp1 ap365390; version=21.sp1 ap366348; version=21.sp1 ap370908; version=21.sp1 ap371281; version=21.sp1 ap372422; version=21.sp1 ap373102; version=21.sp1 ap374822; version=21.sp1 ap375026; version=21.sp1 ap375053; version=21.sp1 ap379493; version=21.sp1 ap380506; version=21.sp9 ap360116; version=21.sp9 ap367207; version=22.0; version=22.0 ap342836; version=22.0 ap345032; version=22.0 ap346307; version=22.0 ap347741; version=22.0 ap348945; version=22.0 ap349201; version=22.0 ap350179; version=22.0 ap350217; version=22.0 ap350573; version=22.0 ap351263; version=22.0 ap351700; version=22.0 ap352109; version=22.0 ap352205; version=22.0 ap352516; version=22.0 ap352703; version=22.0 ap352726; version=22.0 ap352932; version=22.0 ap352962; version=22.0 ap352972; version=22.0 ap353311; version=22.0 ap353360; version=22.0 ap353384; version=22.0 ap353418; version=22.0 ap353490; version=22.0 ap353577; version=22.0 ap353681; version=22.0 ap353915; version=22.0 ap353975; version=22.0 ap354069; version=22.0 ap354070; version=22.0 ap354090; version=22.0 ap354098; version=22.0 ap354313; version=22.0 ap354413; version=22.0 ap354597; version=22.0 ap354785; version=22.0 ap354921; version=22.0 ap354936; version=22.0 ap355083; version=22.0 ap355091; version=22.0 ap355285; version=22.0 ap355300; version=22.0 ap355365; version=22.0 ap355385; version=22.0 ap355674; version=22.0 ap355757; version=22.0 ap355894; version=22.0 ap355905; version=22.0 ap355922; version=22.0 ap356140; version=22.0 ap356359; version=22.0 ap356390; version=22.0 ap356434; version=22.0 ap356458; version=22.0 ap356474; version=22.0 ap356603; version=22.0 ap356706; version=22.0 ap356848; version=22.0 ap357047; version=22.0 ap357400; version=22.0 ap357447; version=22.0 ap357506; version=22.0 ap357560; version=22.0 ap357607; version=22.0 ap357632; version=22.0 ap357645; version=22.0 ap357768; version=22.0 ap357769; version=22.0 ap357859; version=22.0 ap358234; version=22.0 ap358246; version=22.0 ap358357; version=22.0 ap358454; version=22.0 ap358469; version=22.0 ap358563; version=22.0 ap358887; version=22.0 ap358971; version=22.0 ap359049; version=22.0 ap359156; version=22.0 ap359429; version=22.0 ap359433; version=22.0 ap359465; version=22.0 ap359470; version=22.0 ap359549; version=22.0 ap359644; version=22.0 ap359748; version=22.0 ap359765; version=22.0 ap359972; version=22.0 ap359991; version=22.0 ap360116; version=22.0 ap360184; version=22.0 ap360201; version=22.0 ap360244; version=22.0 ap360250; version=22.0 ap360564; version=22.0 ap360817; version=22.0 ap360904; version=22.0 ap360912; version=22.0 ap361153; version=22.0 ap361154; version=22.0 ap361445; version=22.0 ap361520; version=22.0 ap361533; version=22.0 ap361559; version=22.0 ap361560; version=22.0 ap361820; version=22.0 ap362001; version=22.0 ap362163; version=22.0 ap362276; version=22.0 ap362328; version=22.0 ap362490; version=22.0 ap362771; version=22.0 ap362799; version=22.0 ap362848; version=22.0 ap363332; version=22.0 ap363363; version=22.0 ap363521; version=22.0 ap363568; version=22.0 ap363596; version=22.0 ap363729; version=22.0 ap363759; version=22.0 ap363770; version=22.0 ap363815; version=22.0 ap364199; version=22.0 ap364473; version=22.0 ap364521; version=22.0 ap364781; version=22.0 ap364797; version=22.0 ap364844; version=22.0 ap364932; version=22.0 ap365115; version=22.0 ap365146; version=22.0 ap365172; version=22.0 ap365173; version=22.0 ap365223; version=22.0 ap365400; version=22.0 ap365449; version=22.0 ap365545; version=22.0 ap365597; version=22.0 ap365601; version=22.0 ap365632; version=22.0 ap365685; version=22.0 ap365727; version=22.0 ap365730; version=22.0 ap365758; version=22.0 ap365779; version=22.0 ap365800; version=22.0 ap365801; version=22.0 ap365905; version=22.0 ap365920; version=22.0 ap366174; version=22.0 ap366180; version=22.0 ap366358; version=22.0 ap366649; version=22.0 ap366656; version=22.0 ap366701; version=22.0 ap366744; version=22.0 ap366882; version=22.0 ap366898; version=22.0 ap366916; version=22.0 ap367109; version=22.0 ap367291; version=22.0 ap367367; version=22.0 ap367396; version=22.0 ap367434; version=22.0 ap367453; version=22.0 ap367524; version=22.0 ap367732; version=22.0 ap367874; version=22.0 ap368026; version=22.0 ap368087; version=22.0 ap368125; version=22.0 ap368180; version=22.0 ap368216; version=22.0 ap368326; version=22.0 ap368422; version=22.0 ap368604; version=22.0 ap368695; version=22.0 ap368913; version=22.0 ap368987; version=22.0 ap369173; version=22.0 ap369219; version=22.0 ap369227; version=22.0 ap369550; version=22.0 ap369571; version=22.0 ap369641; version=22.0 ap369668; version=22.0 ap369674; version=22.0 ap369774; version=22.0 ap369863; version=22.0 ap369881; version=22.0 ap369931; version=22.0 ap369934; version=22.0 ap370138; version=22.0 ap370180; version=22.0 ap370269; version=22.0 ap370358; version=22.0 ap370389; version=22.0 ap370424; version=22.0 ap370459; version=22.0 ap370544; version=22.0 ap370545; version=22.0 ap370590; version=22.0 ap370615; version=22.0 ap370636; version=22.0 ap370654; version=22.0 ap370675; version=22.0 ap370737; version=22.0 ap371033; version=22.0 ap371313; version=22.0 ap371437; version=22.0 ap371467; version=22.0 ap371583; version=22.0 ap371587; version=22.0 ap371656; version=22.0 ap371681; version=22.0 ap371871; version=22.0 ap371911; version=22.0 ap371961; version=22.0 ap372016; version=22.0 ap372024; version=22.0 ap372043; version=22.0 ap372072; version=22.0 ap372152; version=22.0 ap372177; version=22.0 ap372243; version=22.0 ap372354; version=22.0 ap372371; version=22.0 ap372390; version=22.0 ap372433; version=22.0 ap372504; version=22.0 ap372643; version=22.0 ap372706; version=22.0 ap372708; version=22.0 ap372750; version=22.0 ap372757; version=22.0 ap372799; version=22.0 ap372845; version=22.0 ap372956; version=22.0 ap372963; version=22.0 ap373018; version=22.0 ap373046; version=22.0 ap373098; version=22.0 ap373108; version=22.0 ap373111; version=22.0 ap373118; version=22.0 ap373122; version=22.0 ap373438; version=22.0 ap373452; version=22.0 ap373539; version=22.0 ap373684; version=22.0 ap373820; version=22.0 ap373855; version=22.0 ap373899; version=22.0 ap373954; version=22.0 ap374114; version=22.0 ap374230; version=22.0 ap374269; version=22.0 ap374330; version=22.0 ap374334; version=22.0 ap374339; version=22.0 ap374356; version=22.0 ap374428; version=22.0 ap374460; version=22.0 ap374507; version=22.0 ap374596; version=22.0 ap374660; version=22.0 ap374803; version=22.0 ap374895; version=22.0 ap374971; version=22.0 ap375018; version=22.0 ap375069; version=22.0 ap375090; version=22.0 ap375091; version=22.0 ap375345; version=22.0 ap375354; version=22.0 ap375383; version=22.0 ap375465; version=22.0 ap375634; version=22.0 ap375685; version=22.0 ap375688; version=22.0 ap375719; version=22.0 ap375743; version=22.0 ap375862; version=22.0 ap375924; version=22.0 ap375937; version=22.0 ap376041; version=22.0 ap376100; version=22.0 ap376181; version=22.0 ap376298; version=22.0 ap376410; version=22.0 ap376416; version=22.0 ap376429; version=22.0 ap376531; version=22.0 ap376541; version=22.0 ap376614; version=22.0 ap376620; version=22.0 ap376652; version=22.0 ap376661; version=22.0 ap376668; version=22.0 ap376701; version=22.0 ap376710; version=22.0 ap377068; version=22.0 ap377149; version=22.0 ap377307; version=22.0 ap377384; version=22.0 ap377412; version=22.0 ap377480; version=22.0 ap377494; version=22.0 ap377566; version=22.0 ap377577; version=22.0 ap377581; version=22.0 ap377757; version=22.0 ap377779; version=22.0 ap378079; version=22.0 ap378332; version=22.0 ap378405; version=22.0 ap378440; version=22.0 ap378471; version=22.0 ap378509; version=22.0 ap378581; version=22.0 ap378585; version=22.0 ap378866; version=22.0 ap378882; version=22.0 ap378953; version=22.0 ap378999; version=22.0 ap379008; version=22.0 ap379016; version=22.0 ap379374; version=22.0 ap379389; version=22.0 ap379487; version=22.0 ap379597; version=22.0 ap379694; version=22.0 ap379780; version=22.0 ap379795; version=22.0 ap379833; version=22.0 ap379838; version=22.0 ap379972; version=22.0 ap380041; version=22.0 ap380117; version=22.0 ap380143; version=22.0 ap380187; version=22.0 ap380391; version=22.0 ap380473; version=22.0 ap380486; version=22.0 ap380535; version=22.0 ap380629; version=22.0 ap380751; version=22.0 ap380771; version=22.0 ap381091; version=22.0 ap381118; version=22.0 ap381136; version=22.0 ap381243; version=22.0 ap381584; version=22.0 ap381594; version=22.0 ap381732; version=22.0 ap382158; version=22.0 ap382192; version=22.0 ap382240; version=22.0 ap382251; version=22.0 ap382358; version=22.0 ap382362; version=22.0 ap382434; version=22.0 ap382487; version=22.0 ap382488; version=22.0 ap382717; version=22.0 ap382977; version=22.0 ap383002; version=22.0 ap383134; version=22.0 ap383170; version=22.0 ap383309; version=22.0 ap383514; version=22.0 ap383569; version=22.0 ap383710; version=23.0; version=23.0 ap360007; version=23.0 ap363128; version=23.0 ap366358; version=23.0 ap366677; version=23.0 ap366803; version=23.0 ap367332; version=23.0 ap367874; version=23.0 ap367974; version=23.0 ap367998; version=23.0 ap368445; version=23.0 ap369227; version=23.0 ap369295; version=23.0 ap369529; version=23.0 ap369881; version=23.0 ap370193; version=23.0 ap370911; version=23.0 ap370952; version=23.0 ap371155; version=23.0 ap371436; version=23.0 ap371681; version=23.0 ap371682; version=23.0 ap371775; version=23.0 ap372337; version=23.0 ap372389; version=23.0 ap372706; version=23.0 ap372708; version=23.0 ap373015; version=23.0 ap373034; version=23.0 ap373299; version=23.0 ap373391; version=23.0 ap373539; version=23.0 ap373562; version=23.0 ap373899; version=23.0 ap374324; version=23.0 ap374971; version=23.0 ap375003; version=23.0 ap375097; version=23.0 ap375449; version=23.0 ap375661; version=23.0 ap375720; version=23.0 ap375908; version=23.0 ap376041; version=23.0 ap376179; version=23.0 ap376252; version=23.0 ap376410; version=23.0 ap376426; version=23.0 ap376429; version=23.0 ap376485; version=23.0 ap376614; version=23.0 ap376620; version=23.0 ap376671; version=23.0 ap376935; version=23.0 ap377149; version=23.0 ap377494; version=23.0 ap377515; version=23.0 ap377516; version=23.0 ap377578; version=23.0 ap377984; version=23.0 ap378025; version=23.0 ap378218; version=23.0 ap378257; version=23.0 ap378863; version=23.0 ap378882; version=23.0 ap379326; version=23.0 ap379888; version=23.0 ap380161; version=23.0 ap380180; version=23.0 ap380446; version=23.0 ap380473; version=23.0 ap380512; version=23.0 ap380537; version=23.0 ap380783; version=23.0 ap381072; version=23.0 ap381088; version=23.0 ap381091; version=23.0 ap381498; version=23.0 ap381584; version=23.0 ap381781; version=23.0 ap382053; version=23.0 ap382253; version=23.0 ap382362; version=23.0 ap382487; version=23.0 ap382709; version=23.0 ap382717; version=23.0 ap382992; version=23.0 ap383168; version=23.0 ap383594; version=23.0 ap383785; version=23.0 ap384428; version=23.0 ap384431; version=RI.2021.02; version=RI.2021.08; version=RI.2021.09; version=RI.2021.10; version=RI.2021.11; version=RI.2021.12; version=RI.2022.02; version=RI.2022.03; version=RI.2022.04; version=RI.2022.05; version=RI.2022.06; version=RI.2022.07; version=RI.2022.08; version=RI.2022.09; version=RI.2022.10; version=RI.2022.12; version=RI.2023.01; version=RI.2023.02; version=RI.2023.03; version=RI.2023.04; version=RI.2023.05; version=RI.2023.07

Published CVSS scores

10.0CiscoCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:X

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026
Latest reporting daySep 16, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectornetwork
Privilegesunauthenticated
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-287Improper Authentication
T1190Exploit Public-Facing Application

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo