What’s Vulnerable › Vulnerabilities

CVE-2023-2005: Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-26 · updated 2026-08-17
• Weakness: CWE-427

Description

Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.

Affected products

• Tenable Nessus: all versions
• Tenable, Inc. Security Center: all versions
• Tenable.io: all versions

References

• https://www.tenable.com/security/tns-2023-21
• https://www.tenable.com/security/tns-2023-21

Get alerted when CVE-2023-2005 or the next vulnerability affects your stack