CVE-2024-20399
Last modified
CVE-2024-20399 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. CISA has confirmed active exploitation in the wild. EPSS estimates a 4.27% chance of exploitation in the next 30 days.
Description
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root. Note: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges: Nexus 3000 Series Switches Nexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later Nexus 9000 Series Switches in standalone NX-OS mode
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Nx-Os | 6.2\(2\) |
| Cisco | Nx-Os | 6.2\(2a\) |
| Cisco | Nx-Os | 6.2\(6\) |
| Cisco | Nx-Os | 6.2\(6a\) |
| Cisco | Nx-Os | 6.2\(6b\) |
| Cisco | Nx-Os | 6.2\(8\) |
| Cisco | Nx-Os | 6.2\(8a\) |
| Cisco | Nx-Os | 6.2\(8b\) |
| Cisco | Nx-Os | 6.2\(10\) |
| Cisco | Nx-Os | 6.2\(12\) |
| Cisco | Nx-Os | 6.2\(14\) |
| Cisco | Nx-Os | 6.2\(16\) |
| Cisco | Nx-Os | 6.2\(18\) |
| Cisco | Nx-Os | 6.2\(20\) |
| Cisco | Nx-Os | 6.2\(20a\) |
| Cisco | Nx-Os | 6.2\(22\) |
| Cisco | Nx-Os | 6.2\(24\) |
| Cisco | Nx-Os | 6.2\(24a\) |
| Cisco | Nx-Os | 7.2\(0\)d1\(1\) |
| Cisco | Nx-Os | 7.2\(1\)d1\(1\) |
| Cisco | Nx-Os | 7.2\(2\)d1\(1\) |
| Cisco | Nx-Os | 7.2\(2\)d1\(2\) |
| Cisco | Nx-Os | 7.3\(0\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(0\)dx\(1\) |
| Cisco | Nx-Os | 7.3\(1\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(2\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(2\)d1\(2\) |
| Cisco | Nx-Os | 7.3\(2\)d1\(3\) |
| Cisco | Nx-Os | 7.3\(2\)d1\(3a\) |
| Cisco | Nx-Os | 7.3\(3\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(4\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(5\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(6\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(7\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(8\)d1\(1\) |
| Cisco | Nx-Os | 7.3\(9\)d1\(1\) |
| Cisco | Nx-Os | 8.0\(1\) |
| Cisco | Nx-Os | 8.1\(1\) |
| Cisco | Nx-Os | 8.1\(2\) |
| Cisco | Nx-Os | 8.1\(2a\) |
| Cisco | Nx-Os | 8.2\(1\) |
| Cisco | Nx-Os | 8.2\(2\) |
| Cisco | Nx-Os | 8.2\(3\) |
| Cisco | Nx-Os | 8.2\(4\) |
| Cisco | Nx-Os | 8.2\(5\) |
| Cisco | Nx-Os | 8.2\(6\) |
| Cisco | Nx-Os | 8.2\(7\) |
| Cisco | Nx-Os | 8.2\(7a\) |
| Cisco | Nx-Os | 8.2\(8\) |
| Cisco | Nx-Os | 8.2\(9\) |
Showing 50 of 262 affected configurations. See NVD for the full list.
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20399US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-20399?
How severe is CVE-2024-20399?
How do I fix CVE-2024-20399?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-20393A vulnerability in the web-based management interface of Cis…8.8
- CVE-2024-20394A vulnerability in Cisco AppDynamics Network Visibility Agen…5.5
- CVE-2024-20395A vulnerability in the media retrieval functionality of Cisc…7.3
- CVE-2024-20396A vulnerability in the protocol handlers of Cisco Webex App …6.5
- CVE-2024-20397A vulnerability in the bootloader of Cisco NX-OS Software co…5.2
- CVE-2024-20398A vulnerability in the CLI of Cisco IOS XR Software could al…7.8
- CVE-2024-2040The Himer WordPress theme before 2.1.1 does not have CSRF ch…4.3
- CVE-2024-20400A vulnerability in the web-based management interface of Cis…4.7
- CVE-2024-20401A vulnerability in the content scanning and message filterin…9.8
- CVE-2024-20402A vulnerability in the SSL VPN feature for Cisco Adaptive Se…8.6
- CVE-2024-20403A vulnerability in the web-based management interface of Cis…5.4
- CVE-2024-20404A vulnerability in the web-based management interface of Cis…5.3
Are you affected by CVE-2024-20399?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST