Product:
Intersight Virtual Appliance
Summary
A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance. This vulnerability is due to improper file permissions on configuration files for system accounts within the maintenance shell. A successful exploit could allow the attacker to gain full control of the appliance, access sensitive information, modify workloads, and cause a denial of service.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6 | CVE-2026-20092 |
Exploitation
An attacker can exploit this vulnerability by accessing the maintenance shell as a read-only administrator. By manipulating system files due to improper file permissions, the attacker can grant themselves root privileges. This exploitation requires the attacker to have administrative access to the maintenance shell.
Affected Products
- Intersight Virtual Appliance: Vulnerable due to improper file permissions allowing privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to review and correct the file permissions on configuration files for system accounts within the maintenance shell. Additionally, restricting access to the maintenance shell and monitoring for unauthorized access attempts can help prevent exploitation.