Lucene search

[email protected]NVD:CVE-2024-20399

HistoryJul 01, 2024 - 5:15 p.m.

CVE-2024-20399

2024-07-0117:15:04

CWE-78

[email protected]

web.nvd.nist.gov

cisco

vulnerability

nx-os software

arbitrary commands

root access

authentication

local attacker

configuration cli commands

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.023 Low

EPSS

Percentile

89.7%

JSON

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device.

This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.

Note: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials.

Affected configurations

NVD

Node

cisconx-osMatch6.2\(2\)

cisconx-osMatch6.2\(2a\)

cisconx-osMatch6.2\(6\)

cisconx-osMatch6.2\(6a\)

cisconx-osMatch6.2\(6b\)

cisconx-osMatch6.2\(8\)

cisconx-osMatch6.2\(8a\)

cisconx-osMatch6.2\(8b\)

cisconx-osMatch6.2\(10\)

cisconx-osMatch6.2\(12\)

cisconx-osMatch6.2\(14\)

cisconx-osMatch6.2\(16\)

cisconx-osMatch6.2\(18\)

cisconx-osMatch6.2\(20\)

cisconx-osMatch6.2\(20a\)

cisconx-osMatch6.2\(22\)

cisconx-osMatch6.2\(24\)

cisconx-osMatch6.2\(24a\)

cisconx-osMatch7.2\(0\)d1\(1\)

cisconx-osMatch7.2\(1\)d1\(1\)

cisconx-osMatch7.2\(2\)d1\(1\)

cisconx-osMatch7.2\(2\)d1\(2\)

cisconx-osMatch7.3\(0\)d1\(1\)

cisconx-osMatch7.3\(0\)dx\(1\)

cisconx-osMatch7.3\(1\)d1\(1\)

cisconx-osMatch7.3\(2\)d1\(1\)

cisconx-osMatch7.3\(2\)d1\(2\)

cisconx-osMatch7.3\(2\)d1\(3\)

cisconx-osMatch7.3\(2\)d1\(3a\)

cisconx-osMatch7.3\(3\)d1\(1\)

cisconx-osMatch7.3\(4\)d1\(1\)

cisconx-osMatch7.3\(5\)d1\(1\)

cisconx-osMatch7.3\(6\)d1\(1\)

cisconx-osMatch7.3\(7\)d1\(1\)

cisconx-osMatch7.3\(8\)d1\(1\)

cisconx-osMatch7.3\(9\)d1\(1\)

cisconx-osMatch8.0\(1\)

cisconx-osMatch8.1\(1\)

cisconx-osMatch8.1\(2\)

cisconx-osMatch8.1\(2a\)

cisconx-osMatch8.2\(1\)

cisconx-osMatch8.2\(2\)

cisconx-osMatch8.2\(3\)

cisconx-osMatch8.2\(4\)

cisconx-osMatch8.2\(5\)

cisconx-osMatch8.2\(6\)

cisconx-osMatch8.2\(7\)

cisconx-osMatch8.2\(7a\)

cisconx-osMatch8.2\(8\)

cisconx-osMatch8.2\(9\)

cisconx-osMatch8.2\(10\)

cisconx-osMatch8.2\(11\)

cisconx-osMatch8.3\(1\)

cisconx-osMatch8.3\(2\)

cisconx-osMatch8.4\(1\)

cisconx-osMatch8.4\(2\)

cisconx-osMatch8.4\(3\)

cisconx-osMatch8.4\(4\)

cisconx-osMatch8.4\(4a\)

cisconx-osMatch8.4\(5\)

cisconx-osMatch8.4\(6\)

cisconx-osMatch8.4\(6a\)

cisconx-osMatch8.4\(7\)

cisconx-osMatch8.4\(8\)

cisconx-osMatch8.4\(9\)

AND

cisconexus_7000Match-

cisconexus_7000_10-slotMatch-

cisconexus_7000_18-slotMatch-

cisconexus_7000_4-slotMatch-

cisconexus_7000_9-slotMatch-

cisconexus_7000_supervisor_1Match-

cisconexus_7000_supervisor_2Match-

cisconexus_7000_supervisor_2eMatch-

cisconexus_7004Match-

cisconexus_7009Match-

cisconexus_7010Match-

cisconexus_7018Match-

cisconexus_7700Match-

cisconexus_7700_10-slotMatch-

cisconexus_7700_18-slotMatch-

cisconexus_7700_2-slotMatch-

cisconexus_7700_6-slotMatch-

cisconexus_7700_supervisor_2eMatch-

cisconexus_7700_supervisor_3eMatch-

cisconexus_7702Match-

cisconexus_7706Match-

cisconexus_7710Match-

cisconexus_7718Match-

Node

cisconx-osMatch6.2\(1\)

cisconx-osMatch6.2\(3\)

cisconx-osMatch6.2\(5\)

cisconx-osMatch6.2\(5a\)

cisconx-osMatch6.2\(5b\)

cisconx-osMatch6.2\(7\)

cisconx-osMatch6.2\(9\)

cisconx-osMatch6.2\(9a\)

cisconx-osMatch6.2\(9b\)

cisconx-osMatch6.2\(9c\)

cisconx-osMatch6.2\(11\)

cisconx-osMatch6.2\(11b\)

cisconx-osMatch6.2\(11c\)

cisconx-osMatch6.2\(11d\)

cisconx-osMatch6.2\(11e\)

cisconx-osMatch6.2\(13\)

cisconx-osMatch6.2\(13a\)

cisconx-osMatch6.2\(13b\)

cisconx-osMatch6.2\(15\)

cisconx-osMatch6.2\(17\)

cisconx-osMatch6.2\(19\)

cisconx-osMatch6.2\(21\)

cisconx-osMatch6.2\(23\)

cisconx-osMatch6.2\(25\)

cisconx-osMatch6.2\(27\)

cisconx-osMatch6.2\(29\)

cisconx-osMatch6.2\(31\)

cisconx-osMatch6.2\(33\)

cisconx-osMatch7.3\(0\)d1\(1\)

cisconx-osMatch7.3\(0\)dy\(1\)

cisconx-osMatch7.3\(1\)d1\(1\)

cisconx-osMatch7.3\(1\)dy\(1\)

cisconx-osMatch8.1\(1\)

cisconx-osMatch8.1\(1a\)

cisconx-osMatch8.1\(1b\)

cisconx-osMatch8.2\(1\)

cisconx-osMatch8.2\(2\)

cisconx-osMatch8.3\(1\)

cisconx-osMatch8.3\(2\)

cisconx-osMatch8.4\(1\)

cisconx-osMatch8.4\(1a\)

cisconx-osMatch8.4\(2\)

cisconx-osMatch8.4\(2a\)

cisconx-osMatch8.4\(2b\)

cisconx-osMatch8.4\(2c\)

cisconx-osMatch8.4\(2d\)

cisconx-osMatch8.4\(2e\)

cisconx-osMatch8.4\(2f\)

cisconx-osMatch8.5\(1\)

cisconx-osMatch9.2\(1\)

cisconx-osMatch9.2\(1a\)

cisconx-osMatch9.2\(2\)

cisconx-osMatch9.3\(1\)

cisconx-osMatch9.3\(2\)

cisconx-osMatch9.3\(2a\)

cisconx-osMatch9.4\(1\)

cisconx-osMatch9.4\(1a\)

cisconx-osMatch9.4\(2\)

AND

ciscomds_9000Match-

ciscomds_9100Match-

ciscomds_9132tMatch-

ciscomds_9134Match-

ciscomds_9140Match-

ciscomds_9148Match-

ciscomds_9148sMatch-

ciscomds_9148tMatch-

ciscomds_9200Match-

ciscomds_9216Match-

ciscomds_9216aMatch-

ciscomds_9216iMatch-

ciscomds_9222iMatch-

ciscomds_9250iMatch-

ciscomds_9396sMatch-

ciscomds_9396tMatch-

ciscomds_9500Match-

ciscomds_9506Match-

ciscomds_9509Match-

ciscomds_9513Match-

ciscomds_9700Match-

ciscomds_9706Match-

ciscomds_9710Match-

ciscomds_9718Match-

Node

cisconx-osMatch6.0\(2\)a6\(1\)

cisconx-osMatch6.0\(2\)a6\(1a\)

cisconx-osMatch6.0\(2\)a6\(2\)

cisconx-osMatch6.0\(2\)a6\(2a\)

cisconx-osMatch6.0\(2\)a6\(3\)

cisconx-osMatch6.0\(2\)a6\(3a\)

cisconx-osMatch6.0\(2\)a6\(4\)

cisconx-osMatch6.0\(2\)a6\(4a\)

cisconx-osMatch6.0\(2\)a6\(5\)

cisconx-osMatch6.0\(2\)a6\(5a\)

cisconx-osMatch6.0\(2\)a6\(5b\)

cisconx-osMatch6.0\(2\)a6\(6\)

cisconx-osMatch6.0\(2\)a6\(7\)

cisconx-osMatch6.0\(2\)a6\(8\)

cisconx-osMatch6.0\(2\)a8\(1\)

cisconx-osMatch6.0\(2\)a8\(2\)

cisconx-osMatch6.0\(2\)a8\(3\)

cisconx-osMatch6.0\(2\)a8\(4\)

cisconx-osMatch6.0\(2\)a8\(4a\)

cisconx-osMatch6.0\(2\)a8\(5\)

cisconx-osMatch6.0\(2\)a8\(6\)

cisconx-osMatch6.0\(2\)a8\(7\)

cisconx-osMatch6.0\(2\)a8\(7a\)

cisconx-osMatch6.0\(2\)a8\(7b\)

cisconx-osMatch6.0\(2\)a8\(8\)

cisconx-osMatch6.0\(2\)a8\(9\)

cisconx-osMatch6.0\(2\)a8\(10\)

cisconx-osMatch6.0\(2\)a8\(10a\)

cisconx-osMatch6.0\(2\)a8\(11\)

cisconx-osMatch6.0\(2\)a8\(11a\)

cisconx-osMatch6.0\(2\)a8\(11b\)

cisconx-osMatch6.0\(2\)u6\(1\)

cisconx-osMatch6.0\(2\)u6\(1a\)

cisconx-osMatch6.0\(2\)u6\(2\)

cisconx-osMatch6.0\(2\)u6\(2a\)

cisconx-osMatch6.0\(2\)u6\(3\)

cisconx-osMatch6.0\(2\)u6\(3a\)

cisconx-osMatch6.0\(2\)u6\(4\)

cisconx-osMatch6.0\(2\)u6\(4a\)

cisconx-osMatch6.0\(2\)u6\(5\)

cisconx-osMatch6.0\(2\)u6\(5a\)

cisconx-osMatch6.0\(2\)u6\(5b\)

cisconx-osMatch6.0\(2\)u6\(5c\)

cisconx-osMatch6.0\(2\)u6\(6\)

cisconx-osMatch6.0\(2\)u6\(7\)

cisconx-osMatch6.0\(2\)u6\(8\)

cisconx-osMatch6.0\(2\)u6\(9\)

cisconx-osMatch6.0\(2\)u6\(10\)

cisconx-osMatch7.0\(3\)f1\(1\)

cisconx-osMatch7.0\(3\)f2\(1\)

cisconx-osMatch7.0\(3\)f2\(2\)

cisconx-osMatch7.0\(3\)f3\(1\)

cisconx-osMatch7.0\(3\)f3\(2\)

cisconx-osMatch7.0\(3\)f3\(3\)

cisconx-osMatch7.0\(3\)f3\(3a\)

cisconx-osMatch7.0\(3\)f3\(3c\)

cisconx-osMatch7.0\(3\)f3\(4\)

cisconx-osMatch7.0\(3\)f3\(5\)

cisconx-osMatch7.0\(3\)i4\(1\)

cisconx-osMatch7.0\(3\)i4\(2\)

cisconx-osMatch7.0\(3\)i4\(3\)

cisconx-osMatch7.0\(3\)i4\(4\)

cisconx-osMatch7.0\(3\)i4\(5\)

cisconx-osMatch7.0\(3\)i4\(6\)

cisconx-osMatch7.0\(3\)i4\(7\)

cisconx-osMatch7.0\(3\)i4\(8\)

cisconx-osMatch7.0\(3\)i4\(8a\)

cisconx-osMatch7.0\(3\)i4\(8b\)

cisconx-osMatch7.0\(3\)i4\(8z\)

cisconx-osMatch7.0\(3\)i4\(9\)

cisconx-osMatch7.0\(3\)i5\(1\)

cisconx-osMatch7.0\(3\)i5\(2\)

cisconx-osMatch7.0\(3\)i6\(1\)

cisconx-osMatch7.0\(3\)i6\(2\)

cisconx-osMatch7.0\(3\)i7\(1\)

cisconx-osMatch7.0\(3\)i7\(2\)

cisconx-osMatch7.0\(3\)i7\(3\)

cisconx-osMatch7.0\(3\)i7\(4\)

cisconx-osMatch7.0\(3\)i7\(5\)

cisconx-osMatch7.0\(3\)i7\(5a\)

cisconx-osMatch7.0\(3\)i7\(6\)

cisconx-osMatch7.0\(3\)i7\(7\)

cisconx-osMatch7.0\(3\)i7\(8\)

cisconx-osMatch7.0\(3\)i7\(9\)

cisconx-osMatch7.0\(3\)i7\(10\)

cisconx-osMatch9.2\(1\)

cisconx-osMatch9.2\(2\)

cisconx-osMatch9.2\(2t\)

cisconx-osMatch9.2\(2v\)

cisconx-osMatch9.2\(3\)

cisconx-osMatch9.2\(4\)

cisconx-osMatch9.3\(1\)

cisconx-osMatch9.3\(2\)

cisconx-osMatch9.3\(3\)

cisconx-osMatch9.3\(4\)

cisconx-osMatch9.3\(5\)

cisconx-osMatch9.3\(6\)

cisconx-osMatch9.3\(7\)

cisconx-osMatch9.3\(7a\)

cisconx-osMatch9.3\(8\)

cisconx-osMatch9.3\(9\)

cisconx-osMatch9.3\(10\)

cisconx-osMatch9.3\(11\)

cisconx-osMatch9.3\(12\)

cisconx-osMatch9.3\(13\)

cisconx-osMatch10.1\(1\)

cisconx-osMatch10.1\(2\)

cisconx-osMatch10.2\(1\)

cisconx-osMatch10.2\(1q\)

cisconx-osMatch10.2\(2\)

cisconx-osMatch10.2\(3\)

cisconx-osMatch10.2\(4\)

cisconx-osMatch10.2\(5\)

cisconx-osMatch10.2\(6\)

cisconx-osMatch10.2\(7\)

cisconx-osMatch10.2\(8\)

cisconx-osMatch10.3\(1\)

cisconx-osMatch10.3\(2\)

cisconx-osMatch10.3\(3\)

cisconx-osMatch10.3\(4a\)

cisconx-osMatch10.3\(5\)

cisconx-osMatch10.3\(99w\)

cisconx-osMatch10.3\(99x\)

cisconx-osMatch10.4\(1\)

cisconx-osMatch10.4\(2\)

AND

cisconexus_3000Match-

cisconexus_3016Match-

cisconexus_3016qMatch-

cisconexus_3048Match-

cisconexus_3064Match-

cisconexus_3064-32tMatch-

cisconexus_3064-tMatch-

cisconexus_3064-xMatch-

cisconexus_3064tMatch-

cisconexus_3064xMatch-

cisconexus_3100Match-

cisconexus_3100-vMatch-

cisconexus_3100-zMatch-

cisconexus_3100vMatch-

cisconexus_31108pc-vMatch-

cisconexus_31108pv-vMatch-

cisconexus_31108tc-vMatch-

cisconexus_31128pqMatch-

cisconexus_3132c-zMatch-

cisconexus_3132qMatch-

cisconexus_3132q-vMatch-

cisconexus_3132q-xMatch-

cisconexus_3132q-x\/3132q-xlMatch-

cisconexus_3132q-xlMatch-

cisconexus_3164qMatch-

cisconexus_3172Match-

cisconexus_3172pqMatch-

cisconexus_3172pq-xlMatch-

cisconexus_3172pq\/pq-xlMatch-

cisconexus_3172tqMatch-

cisconexus_3172tq-32tMatch-

cisconexus_3172tq-xlMatch-

cisconexus_3200Match-

cisconexus_3232Match-

cisconexus_3232cMatch-

cisconexus_3232c_Match-

cisconexus_3264c-eMatch-

cisconexus_3264qMatch-

cisconexus_3400Match-

cisconexus_3408-sMatch-

cisconexus_34180ycMatch-

cisconexus_34200yc-smMatch-

cisconexus_3432d-sMatch-

cisconexus_3464cMatch-

cisconexus_3500Match-

cisconexus_3524Match-

cisconexus_3524-xMatch-

cisconexus_3524-x\/xlMatch-

cisconexus_3524-xlMatch-

cisconexus_3548Match-

cisconexus_3548-xMatch-

cisconexus_3548-x\/xlMatch-

cisconexus_3548-xlMatch-

cisconexus_3600Match-

cisconexus_36180yc-rMatch-

cisconexus_3636c-rMatch-

cisconexus_9000Match-

cisconexus_9000_in_aci_modeMatch-

cisconexus_9000_in_standaloneMatch-

cisconexus_9000_in_standalone_nx-os_modeMatch-

cisconexus_9000vMatch-

cisconexus_9200Match-

cisconexus_9200ycMatch-

cisconexus_92160yc-xMatch-

cisconexus_9221cMatch-

cisconexus_92300ycMatch-

cisconexus_92304qcMatch-

cisconexus_9232eMatch-

cisconexus_92348gc-xMatch-

cisconexus_9236cMatch-

cisconexus_9272qMatch-

cisconexus_9300Match-

cisconexus_93108tc-exMatch-

cisconexus_93108tc-ex-24Match-

cisconexus_93108tc-fxMatch-

cisconexus_93108tc-fx-24Match-

cisconexus_93108tc-fx3hMatch-

cisconexus_93108tc-fx3pMatch-

cisconexus_93120txMatch-

cisconexus_93128Match-

cisconexus_93128txMatch-

cisconexus_9316d-gxMatch-

cisconexus_93180lc-exMatch-

cisconexus_93180tc-exMatch-

cisconexus_93180yc-exMatch-

cisconexus_93180yc-ex-24Match-

cisconexus_93180yc-fxMatch-

cisconexus_93180yc-fx-24Match-

cisconexus_93180yc-fx3Match-

cisconexus_93180yc-fx3hMatch-

cisconexus_93180yc-fx3sMatch-

cisconexus_93216tc-fx2Match-

cisconexus_93240tc-fx2Match-

cisconexus_93240yc-fx2Match-

cisconexus_9332cMatch-

cisconexus_9332d-gx2bMatch-

cisconexus_9332d-h2rMatch-

cisconexus_9332pqMatch-

cisconexus_93360yc-fx2Match-

cisconexus_9336c-fx2Match-

cisconexus_9336c-fx2-eMatch-

cisconexus_9336pqMatch-

cisconexus_9336pq_aciMatch-

cisconexus_9336pq_aci_spineMatch-

cisconexus_9348d-gx2aMatch-

cisconexus_9348gc-fx3Match-

cisconexus_9348gc-fxpMatch-

cisconexus_93600cd-gxMatch-

cisconexus_9364cMatch-

cisconexus_9364c-gxMatch-

cisconexus_9364d-gx2aMatch-

cisconexus_9372pxMatch-

cisconexus_9372px-eMatch-

cisconexus_9372txMatch-

cisconexus_9372tx-eMatch-

cisconexus_9396pxMatch-

cisconexus_9396txMatch-

cisconexus_9408Match-

cisconexus_9432pqMatch-

cisconexus_9500Match-

cisconexus_9500_16-slotMatch-

cisconexus_9500_4-slotMatch-

cisconexus_9500_8-slotMatch-

cisconexus_9500_supervisor_aMatch-

cisconexus_9500_supervisor_a\+Match-

cisconexus_9500_supervisor_bMatch-

cisconexus_9500_supervisor_b\+Match-

cisconexus_9500rMatch-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

cisconexus_9536pqMatch-

cisconexus_9636pqMatch-

cisconexus_9716d-gxMatch-

cisconexus_9736pqMatch-

cisconexus_9800Match-

cisconexus_9804Match-

cisconexus_9808Match-

Node

cisconx-osMatch7.1\(0\)n1\(1\)

cisconx-osMatch7.1\(0\)n1\(1a\)

cisconx-osMatch7.1\(0\)n1\(1b\)

cisconx-osMatch7.1\(1\)n1\(1\)

cisconx-osMatch7.1\(2\)n1\(1\)

cisconx-osMatch7.1\(3\)n1\(1\)

cisconx-osMatch7.1\(3\)n1\(2\)

cisconx-osMatch7.1\(4\)n1\(1\)

cisconx-osMatch7.1\(5\)n1\(1\)

cisconx-osMatch7.1\(5\)n1\(1b\)

cisconx-osMatch7.3\(0\)n1\(1\)

cisconx-osMatch7.3\(1\)n1\(1\)

cisconx-osMatch7.3\(2\)n1\(1\)

cisconx-osMatch7.3\(3\)n1\(1\)

cisconx-osMatch7.3\(4\)n1\(1\)

cisconx-osMatch7.3\(5\)n1\(1\)

cisconx-osMatch7.3\(6\)n1\(1\)

cisconx-osMatch7.3\(7\)n1\(1\)

cisconx-osMatch7.3\(7\)n1\(1a\)

cisconx-osMatch7.3\(7\)n1\(1b\)

cisconx-osMatch7.3\(8\)n1\(1\)

cisconx-osMatch7.3\(9\)n1\(1\)

cisconx-osMatch7.3\(10\)n1\(1\)

cisconx-osMatch7.3\(11\)n1\(1\)

cisconx-osMatch7.3\(12\)n1\(1\)

cisconx-osMatch7.3\(13\)n1\(1\)

cisconx-osMatch7.3\(14\)n1\(1\)

AND

cisconexus_5000Match-

cisconexus_5010Match-

cisconexus_5020Match-

cisconexus_5500Match-

cisconexus_5548pMatch-

cisconexus_5548upMatch-

cisconexus_5596tMatch-

cisconexus_5596upMatch-

cisconexus_5600Match-

cisconexus_56128pMatch-

cisconexus_5624qMatch-

cisconexus_5648qMatch-

cisconexus_5672upMatch-

cisconexus_5672up-16gMatch-

cisconexus_5696qMatch-

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.023 Low

EPSS

Percentile

89.7%

JSON

Related for NVD:CVE-2024-20399

cve1 cisco1 cvelist1 nessus1 cisa_kev1 vulnrichment1 attackerkb1 thn1