Description
A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.
This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IOS XE Software | affected |
|
Configuration 1 [-]
| AND |
|
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-24414 | A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems. |
References
History
Fri, 27 Feb 2026 03:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Subscriptions
Cisco
Subscribe
Catalyst Ie3200 Rugged Switch
Subscribe
Catalyst Ie3300 Rugged Switch
Subscribe
Catalyst Ie3400 Rugged Switch
Subscribe
Catalyst Ir1101
Subscribe
Catalyst Ir1821-k9
Subscribe
Catalyst Ir1831-k9
Subscribe
Catalyst Ir1833-k9
Subscribe
Catalyst Ir1835-k9
Subscribe
Catalyst Ir8140h-k9
Subscribe
Catalyst Ir8140h-p-k9
Subscribe
Catalyst Ir8340-k9
Subscribe
Ess-3300-24t-con-a
Subscribe
Ess-3300-24t-con-e
Subscribe
Ess-3300-24t-ncp-a
Subscribe
Ess-3300-24t-ncp-e
Subscribe
Ess-3300-con-a
Subscribe
Ess-3300-con-e
Subscribe
Ess-3300-ncp-a
Subscribe
Ess-3300-ncp-e
Subscribe
Ios Xe
Subscribe
MITRE
Status: PUBLISHED
Assigner: cisco
Published:
Updated: 2026-02-25T17:20:09.150Z
Reserved: 2022-10-27T18:47:50.369Z
Link: CVE-2023-20235
Vulnrichment
Updated: 2024-08-02T09:05:36.672Z
NVD
Status : Modified
Published: 2023-10-04T17:15:09.917
Modified: 2024-11-21T07:40:57.567
Link: CVE-2023-20235
Redhat
No data.
OpenCVE Enrichment
No data.