CVE-2024-20399

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP; https://nvd.nist.gov/vuln/detail/CVE-2024-20399

Remediation deadline: July 23, 2024

Description

Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.

Timeline

Published:July 2nd, 2024 12:00 AM

Last modified:July 2nd, 2024 12:00 AM

Added to KEV:July 2nd, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Cisco

Products

NX-OS

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute