CVE-2024-20366

A vulnerability in the Tail-f High Availability Cluster Communications HCC function pack of Cisco Crosswork Network Services Orchestrator NSO could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability exists because a user-controlled searc...

The vulnerability of the Tail-f High Availability Cluster Communications (HCC) functional package of the Cisco Network Services Orchestrator (NSO) software allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the Tail-f High Availability Cluster Communications HCC functional package of the Cisco Network Services Orchestrator NSO software is related to improper external management of file names or paths. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

PT-2024-3640 · Cisco · Cisco Crosswork Network Services Orchestrator

Name of the Vulnerable Software and Affected Versions: Cisco Crosswork Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the Tail-f High Availability Cluster Communications HCC function pack could allow an authenticated, local attacker to elevate...