CVE-2023-20122

CVE-2023-20122 describes multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure. An authenticated, local attacker could exploit these flaws to escape the restricted shell and gain root privileges on the underlying operating system. With a CVSS score of 7.8 (High), the vulnerability has a low attack complexity and requires local authentication, but successful exploitation grants high confidentiality, integrity, and availability impact. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on CISA's KEV catalog, indicating no active exploitation. Community discussion and media coverage are minimal, suggesting low current attention.