Lucene search

CiscoCVE-2024-20483

HistorySep 11, 2024 - 5:15 p.m.

CVE-2024-20483

2024-09-1117:15:13

CWE-78

cisco

web.nvd.nist.gov

In Wild

cisco

routed pon controller

command injection

docker

mongodb

administrator-level privileges

cisco ios xr software

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

Low

EPSS

Percentile

10.2%

JSON

Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or direct access to the PON Manager MongoDB instance to perform command injection attacks on the PON Controller container and execute arbitrary commands as root.

These vulnerabilities are due to insufficient validation of arguments that are passed to specific configuration commands. An attacker could exploit these vulnerabilities by including crafted input as the argument of an affected configuration command. A successful exploit could allow the attacker to execute arbitrary commands as root on the PON controller.

Affected configurations

Vulners

Node

ciscoios_xr_softwareMatch24.1.1

ciscoios_xr_softwareMatch24.2.1

ciscoios_xr_softwareMatch24.1.2

ciscoios_xr_softwareMatch24.2.11

ciscoios_xr_softwareMatch24.3.1

VendorProductVersionCPE
ciscoios_xr_software24.1.1cpe:2.3:o:cisco:ios_xr_software:24.1.1:*:*:*:*:*:*:*
ciscoios_xr_software24.2.1cpe:2.3:o:cisco:ios_xr_software:24.2.1:*:*:*:*:*:*:*
ciscoios_xr_software24.1.2cpe:2.3:o:cisco:ios_xr_software:24.1.2:*:*:*:*:*:*:*
ciscoios_xr_software24.2.11cpe:2.3:o:cisco:ios_xr_software:24.2.11:*:*:*:*:*:*:*
ciscoios_xr_software24.3.1cpe:2.3:o:cisco:ios_xr_software:24.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xr_software	24.1.1	cpe:2.3:o:cisco:ios_xr_software:24.1.1:::::::*
cisco	ios_xr_software	24.2.1	cpe:2.3:o:cisco:ios_xr_software:24.2.1:::::::*
cisco	ios_xr_software	24.1.2	cpe:2.3:o:cisco:ios_xr_software:24.1.2:::::::*
cisco	ios_xr_software	24.2.11	cpe:2.3:o:cisco:ios_xr_software:24.2.11:::::::*
cisco	ios_xr_software	24.3.1	cpe:2.3:o:cisco:ios_xr_software:24.3.1:::::::*

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XR Software",
    "versions": [
      {
        "version": "24.1.1",
        "status": "affected"
      },
      {
        "version": "24.2.1",
        "status": "affected"
      },
      {
        "version": "24.1.2",
        "status": "affected"
      },
      {
        "version": "24.2.11",
        "status": "affected"
      },
      {
        "version": "24.3.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ponctlr-ci-OHcHmsFL

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

Low

EPSS

Percentile

10.2%

JSON

Related for CVE-2024-20483