CVE-2023-20210: Cisco Broadworks Application Delivery Platform Firmware

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device.

Affected products

• Cisco Broadworks Application Delivery Platform Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Application Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Database Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Database Troubleshooting Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Execution Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Media Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Messaging Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Network Database Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Network Function Manager Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Network Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Profile Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Service Control Function Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Sharing Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Video Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks WebRTC Server Firmware: version 23.0 only; version 24.0 only; version 25.0 only
• Cisco Broadworks Xtended Services Platform Firmware: version 23.0 only; version 24.0 only; version 25.0 only

Published 2023-07-12. Last modified 2026-06-17.