Cisco has reported finding a zero-day flaw in one of its products, which could result in threat actors running malicious code remotely, or stealing sensitive data from target endpoints.
The vulnerability was found in a product called Prime Collaboration Deployment (PCD), a tool used by IT teams to migrate, or upgrade their servers. The flaw is now tracked as CVE-2023-20060, and is deemed of “Medium” severity with a 6.1 score. It’s described as a cross-site scripting vulnerability that can be abused to launch arbitrary code.
