CVE-2024-20278
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected device.
This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input over NETCONF to an affected device. A successful exploit could allow the attacker to elevate privileges from Administrator to root.
Una vulnerabilidad en la función NETCONF del software Cisco IOS XE podría permitir que un atacante remoto autenticado eleve los privilegios a root en un dispositivo afectado. Esta vulnerabilidad se debe a una validación inadecuada de la entrada proporcionada por el usuario. Un atacante podría aprovechar esta vulnerabilidad enviando información manipulada a través de NETCONF a un dispositivo afectado. Un exploit exitoso podría permitir al atacante elevar los privilegios de Administrador a Root.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-11-08 CVE Reserved
- 2024-03-27 CVE Published
- 2024-03-28 EPSS Updated
- 2024-08-15 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-184: Incomplete List of Disallowed Inputs
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-seAx6NLX |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.5 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.6 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.6 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.5 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.10.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.10.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.10.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.10.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.10.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.10.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.8.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.8.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.8.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.8.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.11.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.11.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.11.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.11.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.12.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.12.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.12.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.12.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.12.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.12.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.11.99 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.11.99" | en |
Affected
| ||||||