CVE-2024-20296

Severity Score

4.7

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.
This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.

Una vulnerabilidad en la interfaz de administración basada en web de Cisco Identity Services Engine (ISE) podría permitir que un atacante remoto autenticado cargue archivos arbitrarios en un dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante necesitaría al menos credenciales válidas de administrador de políticas en el dispositivo afectado. Esta vulnerabilidad se debe a una validación inadecuada de los archivos que se cargan en la interfaz de administración basada en web. Un atacante podría aprovechar esta vulnerabilidad cargando archivos arbitrarios en un dispositivo afectado. Un exploit exitoso podría permitir al atacante almacenar archivos maliciosos en el sistema, ejecutar comandos arbitrarios en el sistema operativo y elevar privilegios a root.

*Credits: N/A

CVSS Scores

Ciscov3.1 4.7

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-11-08 CVE Reserved
2024-07-17 CVE Published
2024-07-18 EPSS Updated
2024-08-01 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-434: Unrestricted Upload of File with Dangerous Type

CAPEC

References (1)

URL	Tag	Source
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Cisco Identity Services Engine Software Search vendor "Cisco" for product "Cisco Identity Services Engine Software"				2.7.0 Search vendor "Cisco" for product "Cisco Identity Services Engine Software" and version "2.7.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Identity Services Engine Software Search vendor "Cisco" for product "Cisco Identity Services Engine Software"				3.0.0 Search vendor "Cisco" for product "Cisco Identity Services Engine Software" and version "3.0.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Identity Services Engine Software Search vendor "Cisco" for product "Cisco Identity Services Engine Software"				3.1.0 Search vendor "Cisco" for product "Cisco Identity Services Engine Software" and version "3.1.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Identity Services Engine Software Search vendor "Cisco" for product "Cisco Identity Services Engine Software"				3.2.0 Search vendor "Cisco" for product "Cisco Identity Services Engine Software" and version "3.2.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Identity Services Engine Software Search vendor "Cisco" for product "Cisco Identity Services Engine Software"				3.3.0 Search vendor "Cisco" for product "Cisco Identity Services Engine Software" and version "3.3.0"		en		Affected