CVE-2024-20399

mediumPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.043 · 91. PerzentilExploit · PoCDEEURUUS
grimoire priorityP0 · Act now
Exploitable?
Yes · in the wild
CISA KEV · 1 exploit · PoC
Likely / severe?
4.31% (91st) EPSS
CVSS 6.7 · medium
Is it mine?
1,146 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

hinzugefügt 2024-07-02beheben bis 2024-07-23

erforderliche Maßnahme Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

EPSS · bewertet 2026-10-26

Cisco NX-OS Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root. Note: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges: Nexus 3000 Series Switches Nexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later Nexus 9000 Series Switches in standalone NX-OS mode

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.7
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.8 · Auswirkung 5.9
v3.16mediumAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Nsecondary · FSTEC (BDU) RU
v3.16mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Nsecondary · ENISA EU
v3.16mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Nsecondary · psirt@cisco.com USAusnutzbarkeit 0.8 · Auswirkung 5.2
v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)
v3.16mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Nsecondary · Cisco PSIRT US
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-78USprimärCWE-78US
04

ATT&CK-Techniken

ATT&CK-Techniken, die dies ermöglicht oder abbildet.

05

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

06

betroffene Produkte (1,146)

Betroffene Produkte und Versionsbereiche.

20 von 1,146 angezeigt
07

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • WID-SEC-W-2024-1491Cisco NX-OS: Schwachstelle ermöglicht Ausführen von beliebigem ProgrammcodeDeutsch2024-07-01csaf · cert_bundDE

    Ein lokaler Angreifer kann eine Schwachstelle in Cisco NX-OS ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen.

  • cisco-sa-nxos-cmd-injection-xD9OhyOPCisco NX-OS Software CLI Command Injection Vulnerability2024-07-01csaf · cisco_csafUS

    A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root. Note: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges: Nexus 3000 Series Switches Nexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later Nexus 9000 Series Switches in standalone NX-OS mode Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

08

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

09

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundcisco_csafNVDCVE.orgMITRE
veröffentlicht 2024-07-01geändert 2026-06-17
11

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan