Paper/Archive/CVE-2023-5183

CVE-2023-5183

Illumio Core PCE — Authenticated RCE due to unsafe JSON deserialization

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 78.5.785 × 2015.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the network_traffic API endpoint. An attacker can leverage this vulnerability to execute code in the context of the PCE’s operating system user.

Affected

ProductAffectedFixed inSource

Core PCE19.3.0 – 19.3.6–CNA

Core PCE21.2.0 – 21.2.7–CNA

Core PCE21.5.0 – 21.5.35–CNA

Core PCE22.2.0 – 22.2.41–CNA

Core PCE22.5.0 – 22.5.30–CNA

Core PCE23.2.0 – 23.2.10–CNA

core_policy_compute_engine19.3.0 – 19.3.6–CISA-ADP

core_policy_compute_engine21.2.0 – 21.2.7–CISA-ADP

core_policy_compute_engine21.5.0 – 21.5.35–CISA-ADP

core_policy_compute_engine22.2.0 – 22.2.41–CISA-ADP

core_policy_compute_engine22.5.0 – 22.5.30–CISA-ADP

core_policy_compute_engine23.2.0 – 23.2.10–CISA-ADP

Scores by source

Illumio (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdocs.illumio.com/Guides/security-advisories/september-2023/cve-2023-5183.htm