Lucene search

CiscoCVE-2024-20343

HistorySep 11, 2024 - 5:15 p.m.

CVE-2024-20343

2024-09-1117:15:12

CWE-284

cisco

web.nvd.nist.gov

cisco ios xr

vulnerability

authenticated

attacker

linux

file system

cli command

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.6%

JSON

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlying Linux operating system. The attacker must have valid credentials on the affected device.

This vulnerability is due to incorrect validation of the arguments that are passed to a specific CLI command. An attacker could exploit this vulnerability by logging in to an affected device with low-privileged credentials and using the affected command. A successful exploit could allow the attacker access files in read-only mode on the Linux file system.

Affected configurations

Vulners

Node

ciscoios_xr_softwareMatch6.5.3

ciscoios_xr_softwareMatch6.6.1

ciscoios_xr_softwareMatch6.5.2

ciscoios_xr_softwareMatch6.5.92

ciscoios_xr_softwareMatch6.5.1

ciscoios_xr_softwareMatch6.5.15

ciscoios_xr_softwareMatch6.6.2

ciscoios_xr_softwareMatch7.0.1

ciscoios_xr_softwareMatch6.6.25

ciscoios_xr_softwareMatch6.6.11

ciscoios_xr_softwareMatch6.5.93

ciscoios_xr_softwareMatch6.6.12

ciscoios_xr_softwareMatch7.0.0

ciscoios_xr_softwareMatch7.1.1

ciscoios_xr_softwareMatch7.0.90

ciscoios_xr_softwareMatch6.6.3

ciscoios_xr_softwareMatch7.0.2

ciscoios_xr_softwareMatch7.1.15

ciscoios_xr_softwareMatch7.2.0

ciscoios_xr_softwareMatch7.2.1

ciscoios_xr_softwareMatch7.1.2

ciscoios_xr_softwareMatch7.0.11

ciscoios_xr_softwareMatch7.0.12

ciscoios_xr_softwareMatch7.0.14

ciscoios_xr_softwareMatch7.1.25

ciscoios_xr_softwareMatch6.6.4

ciscoios_xr_softwareMatch7.2.12

ciscoios_xr_softwareMatch7.3.1

ciscoios_xr_softwareMatch7.1.3

ciscoios_xr_softwareMatch7.4.1

ciscoios_xr_softwareMatch7.2.2

ciscoios_xr_softwareMatch7.3.15

ciscoios_xr_softwareMatch7.3.16

ciscoios_xr_softwareMatch7.4.15

ciscoios_xr_softwareMatch7.3.2

ciscoios_xr_softwareMatch7.5.1

ciscoios_xr_softwareMatch7.4.16

ciscoios_xr_softwareMatch7.3.27

ciscoios_xr_softwareMatch7.6.1

ciscoios_xr_softwareMatch7.5.2

ciscoios_xr_softwareMatch7.8.1

ciscoios_xr_softwareMatch7.6.15

ciscoios_xr_softwareMatch7.5.12

ciscoios_xr_softwareMatch7.8.12

ciscoios_xr_softwareMatch7.3.3

ciscoios_xr_softwareMatch7.7.1

ciscoios_xr_softwareMatch7.3.4

ciscoios_xr_softwareMatch7.4.2

ciscoios_xr_softwareMatch7.6.2

ciscoios_xr_softwareMatch7.5.3

ciscoios_xr_softwareMatch7.7.2

ciscoios_xr_softwareMatch7.9.1

ciscoios_xr_softwareMatch7.10.1

ciscoios_xr_softwareMatch7.8.2

ciscoios_xr_softwareMatch7.5.4

ciscoios_xr_softwareMatch7.8.22

ciscoios_xr_softwareMatch7.7.21

ciscoios_xr_softwareMatch7.9.2

ciscoios_xr_softwareMatch7.3.5

ciscoios_xr_softwareMatch7.5.5

ciscoios_xr_softwareMatch7.11.1

ciscoios_xr_softwareMatch7.9.21

ciscoios_xr_softwareMatch7.10.2

ciscoios_xr_softwareMatch24.1.1

ciscoios_xr_softwareMatch7.3.6

ciscoios_xr_softwareMatch7.5.52

VendorProductVersionCPE
ciscoios_xr_software6.5.3cpe:2.3:o:cisco:ios_xr_software:6.5.3:*:*:*:*:*:*:*
ciscoios_xr_software6.6.1cpe:2.3:o:cisco:ios_xr_software:6.6.1:*:*:*:*:*:*:*
ciscoios_xr_software6.5.2cpe:2.3:o:cisco:ios_xr_software:6.5.2:*:*:*:*:*:*:*
ciscoios_xr_software6.5.92cpe:2.3:o:cisco:ios_xr_software:6.5.92:*:*:*:*:*:*:*
ciscoios_xr_software6.5.1cpe:2.3:o:cisco:ios_xr_software:6.5.1:*:*:*:*:*:*:*
ciscoios_xr_software6.5.15cpe:2.3:o:cisco:ios_xr_software:6.5.15:*:*:*:*:*:*:*
ciscoios_xr_software6.6.2cpe:2.3:o:cisco:ios_xr_software:6.6.2:*:*:*:*:*:*:*
ciscoios_xr_software7.0.1cpe:2.3:o:cisco:ios_xr_software:7.0.1:*:*:*:*:*:*:*
ciscoios_xr_software6.6.25cpe:2.3:o:cisco:ios_xr_software:6.6.25:*:*:*:*:*:*:*
ciscoios_xr_software6.6.11cpe:2.3:o:cisco:ios_xr_software:6.6.11:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xr_software	6.5.3	cpe:2.3:o:cisco:ios_xr_software:6.5.3:::::::*
cisco	ios_xr_software	6.6.1	cpe:2.3:o:cisco:ios_xr_software:6.6.1:::::::*
cisco	ios_xr_software	6.5.2	cpe:2.3:o:cisco:ios_xr_software:6.5.2:::::::*
cisco	ios_xr_software	6.5.92	cpe:2.3:o:cisco:ios_xr_software:6.5.92:::::::*
cisco	ios_xr_software	6.5.1	cpe:2.3:o:cisco:ios_xr_software:6.5.1:::::::*
cisco	ios_xr_software	6.5.15	cpe:2.3:o:cisco:ios_xr_software:6.5.15:::::::*
cisco	ios_xr_software	6.6.2	cpe:2.3:o:cisco:ios_xr_software:6.6.2:::::::*
cisco	ios_xr_software	7.0.1	cpe:2.3:o:cisco:ios_xr_software:7.0.1:::::::*
cisco	ios_xr_software	6.6.25	cpe:2.3:o:cisco:ios_xr_software:6.6.25:::::::*
cisco	ios_xr_software	6.6.11	cpe:2.3:o:cisco:ios_xr_software:6.6.11:::::::*

Rows per page:

1-10 of 661

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XR Software",
    "versions": [
      {
        "version": "6.5.3",
        "status": "affected"
      },
      {
        "version": "6.6.1",
        "status": "affected"
      },
      {
        "version": "6.5.2",
        "status": "affected"
      },
      {
        "version": "6.5.92",
        "status": "affected"
      },
      {
        "version": "6.5.1",
        "status": "affected"
      },
      {
        "version": "6.5.15",
        "status": "affected"
      },
      {
        "version": "6.6.2",
        "status": "affected"
      },
      {
        "version": "7.0.1",
        "status": "affected"
      },
      {
        "version": "6.6.25",
        "status": "affected"
      },
      {
        "version": "6.6.11",
        "status": "affected"
      },
      {
        "version": "6.5.93",
        "status": "affected"
      },
      {
        "version": "6.6.12",
        "status": "affected"
      },
      {
        "version": "7.0.0",
        "status": "affected"
      },
      {
        "version": "7.1.1",
        "status": "affected"
      },
      {
        "version": "7.0.90",
        "status": "affected"
      },
      {
        "version": "6.6.3",
        "status": "affected"
      },
      {
        "version": "7.0.2",
        "status": "affected"
      },
      {
        "version": "7.1.15",
        "status": "affected"
      },
      {
        "version": "7.2.0",
        "status": "affected"
      },
      {
        "version": "7.2.1",
        "status": "affected"
      },
      {
        "version": "7.1.2",
        "status": "affected"
      },
      {
        "version": "7.0.11",
        "status": "affected"
      },
      {
        "version": "7.0.12",
        "status": "affected"
      },
      {
        "version": "7.0.14",
        "status": "affected"
      },
      {
        "version": "7.1.25",
        "status": "affected"
      },
      {
        "version": "6.6.4",
        "status": "affected"
      },
      {
        "version": "7.2.12",
        "status": "affected"
      },
      {
        "version": "7.3.1",
        "status": "affected"
      },
      {
        "version": "7.1.3",
        "status": "affected"
      },
      {
        "version": "7.4.1",
        "status": "affected"
      },
      {
        "version": "7.2.2",
        "status": "affected"
      },
      {
        "version": "7.3.15",
        "status": "affected"
      },
      {
        "version": "7.3.16",
        "status": "affected"
      },
      {
        "version": "7.4.15",
        "status": "affected"
      },
      {
        "version": "7.3.2",
        "status": "affected"
      },
      {
        "version": "7.5.1",
        "status": "affected"
      },
      {
        "version": "7.4.16",
        "status": "affected"
      },
      {
        "version": "7.3.27",
        "status": "affected"
      },
      {
        "version": "7.6.1",
        "status": "affected"
      },
      {
        "version": "7.5.2",
        "status": "affected"
      },
      {
        "version": "7.8.1",
        "status": "affected"
      },
      {
        "version": "7.6.15",
        "status": "affected"
      },
      {
        "version": "7.5.12",
        "status": "affected"
      },
      {
        "version": "7.8.12",
        "status": "affected"
      },
      {
        "version": "7.3.3",
        "status": "affected"
      },
      {
        "version": "7.7.1",
        "status": "affected"
      },
      {
        "version": "7.3.4",
        "status": "affected"
      },
      {
        "version": "7.4.2",
        "status": "affected"
      },
      {
        "version": "7.6.2",
        "status": "affected"
      },
      {
        "version": "7.5.3",
        "status": "affected"
      },
      {
        "version": "7.7.2",
        "status": "affected"
      },
      {
        "version": "7.9.1",
        "status": "affected"
      },
      {
        "version": "7.10.1",
        "status": "affected"
      },
      {
        "version": "7.8.2",
        "status": "affected"
      },
      {
        "version": "7.5.4",
        "status": "affected"
      },
      {
        "version": "7.8.22",
        "status": "affected"
      },
      {
        "version": "7.7.21",
        "status": "affected"
      },
      {
        "version": "7.9.2",
        "status": "affected"
      },
      {
        "version": "7.3.5",
        "status": "affected"
      },
      {
        "version": "7.5.5",
        "status": "affected"
      },
      {
        "version": "7.11.1",
        "status": "affected"
      },
      {
        "version": "7.9.21",
        "status": "affected"
      },
      {
        "version": "7.10.2",
        "status": "affected"
      },
      {
        "version": "24.1.1",
        "status": "affected"
      },
      {
        "version": "7.3.6",
        "status": "affected"
      },
      {
        "version": "7.5.52",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-shellutil-HCb278wD

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-20343