CVE-2024-20529

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need valid Super Admin credentials. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability by sending a crafted API request to an affected device. A successful exploit could allow the attacker to read or delete arbitrary files on the underlying operating system.

• CWE-22

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-vuln-DBQdWRyVendor Advisory

Published

Nov 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20523A vulnerability in the web-based management interface of Cis…6.8
• CVE-2024-20524A vulnerability in the web-based management interface of Cis…6.8
• CVE-2024-20525A vulnerability in the web-based management interface of Cis…6.1
• CVE-2024-20526A vulnerability in the SSH server of Cisco Adaptive Security…5.3
• CVE-2024-20527A vulnerability in the API of Cisco ISE could allow an authe…5.5
• CVE-2024-20528A vulnerability in the API of Cisco ISE could allow an authe…7.2
• CVE-2024-2053The Artica Proxy administrative web application will deseria…7.5
• CVE-2024-20530A vulnerability in the web-based management interface of Cis…6.1
• CVE-2024-20531A vulnerability in the API of Cisco ISE could allow an authe…6.5
• CVE-2024-20532A vulnerability in the API of Cisco ISE could allow an authe…5.5
• CVE-2024-20533A vulnerability in the web UI of Cisco Desk Phone 9800 Serie…4.8
• CVE-2024-20534A vulnerability in the web UI of Cisco Desk Phone 9800 Serie…4.8