CVE-2023-20224

CVE-2023-20224 affects Cisco ThousandEyes Enterprise Agent Virtual Appliance. The root cause is insufficient input validation of CLI arguments and an insecure sudo configuration that lets a low-privilege user run commands as root via tcpdump. The KoreLogic advisory demonstrates a post-rotate tcpd...

CVE-2024-20277

The CVE pertains to Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, with a web-based management interface vulnerability that allows authenticated, remote command execution and root privilege escalation due to insufficient input validation. Exploitation involves sending a...

CVE-2023-20217

Cisco ThousandEyes Enterprise Agent Virtual Appliance (installation type) is affected by CVE-2023-20217 due to insufficient input validation in the OS CLI. An authenticated, local attacker could exploit sudo command permissions to read root-owned files via the dig utility, effectively elevating p...