CVE-2024-20469

A vulnerability in specific CLI commands in Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid...

Cisco Identity Services Engine Command Injection (cisco-sa-ise-injection-6kn9tSxm)

According to its self-reported version, Cisco Identity Services Engine Command Injection is affected by a vulnerability. - A vulnerability in specific CLI commands in Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection attacks on the...

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

Cisco has released security updates for two critical security flaws impacting its Smart Licensing Utility that could allow unauthenticated, remote attackers to elevate their privileges or access sensitive information. A brief description of the two vulnerabilities is below - CVE-2024-20439 CVSS...

CVE-2024-20469

creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:51+00:00| seen| https://t.me/cvedetector/4825 2024-09-05 07:07:02+00:00| published-proof-of-concept| https://t.me/CyberBulletin/549 2024-09-05 15:19:45+00:00| seen| https://t.me/truesecator/6171 2024-09-05 15:23:32+00:00|...

CVE-2024-20469 Cisco Identity Services Engine Command Injection Vulnerability

A vulnerability in specific CLI commands in Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid...