Lucene search
CiscoCVE-2024-20369HistoryMay 15, 2024 - 6:15 p.m.
CVE-2024-20369
2024-05-1518:15:09
CWE-601
cisco
web.nvd.nist.gov
32
cisco crosswork nso
web management interface
unauthenticated remote attacker
improper input validation
http request
crafted link
malicious website
nvd
exploit
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
25.9%
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
CNA Affected
[
{
"vendor": "Cisco",
"product": "Cisco Network Services Orchestrator",
"versions": [
{
"version": "5.4",
"status": "affected"
},
{
"version": "5.5",
"status": "affected"
},
{
"version": "5.6",
"status": "affected"
},
{
"version": "5.7",
"status": "affected"
},
{
"version": "5.8",
"status": "affected"
},
{
"version": "5.1.1.1",
"status": "affected"
},
{
"version": "5.1.1.3",
"status": "affected"
},
{
"version": "5.1.2",
"status": "affected"
},
{
"version": "5.2.0.4",
"status": "affected"
},
{
"version": "5.2.1",
"status": "affected"
},
{
"version": "5.2.1.1",
"status": "affected"
},
{
"version": "5.2.3.2",
"status": "affected"
},
{
"version": "5.3.1",
"status": "affected"
},
{
"version": "5.3.4.3",
"status": "affected"
},
{
"version": "5.4.0.1",
"status": "affected"
},
{
"version": "5.4.1",
"status": "affected"
},
{
"version": "5.4.1.1",
"status": "affected"
},
{
"version": "5.4.2",
"status": "affected"
},
{
"version": "5.4.3.1",
"status": "affected"
},
{
"version": "5.4.4.1",
"status": "affected"
},
{
"version": "5.4.4",
"status": "affected"
},
{
"version": "5.4.4.3",
"status": "affected"
},
{
"version": "5.4.3.3",
"status": "affected"
},
{
"version": "5.4.5.1",
"status": "affected"
},
{
"version": "5.4.5.2",
"status": "affected"
},
{
"version": "5.4.5",
"status": "affected"
},
{
"version": "5.4.6",
"status": "affected"
},
{
"version": "5.4.7",
"status": "affected"
},
{
"version": "5.4.7.1",
"status": "affected"
},
{
"version": "5.5.1",
"status": "affected"
},
{
"version": "5.5.2",
"status": "affected"
},
{
"version": "5.5.2.1",
"status": "affected"
},
{
"version": "5.5.2.3",
"status": "affected"
},
{
"version": "5.5.2.4",
"status": "affected"
},
{
"version": "5.5.2.9",
"status": "affected"
},
{
"version": "5.5.2.10",
"status": "affected"
},
{
"version": "5.5.3",
"status": "affected"
},
{
"version": "5.5.2.7",
"status": "affected"
},
{
"version": "5.5.2.12",
"status": "affected"
},
{
"version": "5.5.4.1",
"status": "affected"
},
{
"version": "5.5.3.1",
"status": "affected"
},
{
"version": "5.5.5",
"status": "affected"
},
{
"version": "5.5.6",
"status": "affected"
},
{
"version": "5.5.7",
"status": "affected"
},
{
"version": "5.5.8",
"status": "affected"
},
{
"version": "5.6.1",
"status": "affected"
},
{
"version": "5.6.3",
"status": "affected"
},
{
"version": "5.6.2",
"status": "affected"
},
{
"version": "5.6.5",
"status": "affected"
},
{
"version": "5.6.6",
"status": "affected"
},
{
"version": "5.6.6.1",
"status": "affected"
},
{
"version": "5.6.7",
"status": "affected"
},
{
"version": "5.6.7.1",
"status": "affected"
},
{
"version": "5.6.8",
"status": "affected"
},
{
"version": "5.6.8.1",
"status": "affected"
},
{
"version": "5.6.11",
"status": "affected"
},
{
"version": "5.6.13",
"status": "affected"
},
{
"version": "5.6.14",
"status": "affected"
},
{
"version": "5.6.14.1",
"status": "affected"
},
{
"version": "5.7.1.1",
"status": "affected"
},
{
"version": "5.7.1",
"status": "affected"
},
{
"version": "5.7.2",
"status": "affected"
},
{
"version": "5.7.2.1",
"status": "affected"
},
{
"version": "5.7.3",
"status": "affected"
},
{
"version": "5.7.4",
"status": "affected"
},
{
"version": "5.7.5",
"status": "affected"
},
{
"version": "5.7.5.1",
"status": "affected"
},
{
"version": "5.7.6",
"status": "affected"
},
{
"version": "5.7.6.2",
"status": "affected"
},
{
"version": "5.7.8",
"status": "affected"
},
{
"version": "5.7.10",
"status": "affected"
},
{
"version": "5.7.10.2",
"status": "affected"
},
{
"version": "5.7.11",
"status": "affected"
},
{
"version": "5.7.13",
"status": "affected"
},
{
"version": "5.7.14",
"status": "affected"
},
{
"version": "5.7.9",
"status": "affected"
},
{
"version": "5.7.9.1",
"status": "affected"
},
{
"version": "5.8.1",
"status": "affected"
},
{
"version": "5.8.2",
"status": "affected"
},
{
"version": "5.8.2.1",
"status": "affected"
},
{
"version": "5.8.5",
"status": "affected"
},
{
"version": "5.8.10",
"status": "affected"
},
{
"version": "5.8.11",
"status": "affected"
},
{
"version": "5.8.9",
"status": "affected"
},
{
"version": "6.1",
"status": "affected"
},
{
"version": "6.2",
"status": "affected"
},
{
"version": "6.0.1.1",
"status": "affected"
},
{
"version": "6.0.10",
"status": "affected"
},
{
"version": "6.0.5",
"status": "affected"
},
{
"version": "6.0.8",
"status": "affected"
},
{
"version": "6.1.2.1",
"status": "affected"
},
{
"version": "6.1.5",
"status": "affected"
},
{
"version": "6.1.6",
"status": "affected"
}
]
}
]Related
cisco
cisco
Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability
2024-05-15 16:00:00
nvd
nvd
CVE-2024-20369
2024-05-15 18:15:09
vulnrichment
vulnrichment
CVE-2024-20369
2024-05-15 17:23:34
cvelist
cvelist
CVE-2024-20369
2024-05-15 17:23:34
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
25.9%
Related for CVE-2024-20369