CVE-2024-20469

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-20469
A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid Administrator privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-6kn9tSxm Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch1:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch2:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch3:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch4:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch5:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch6:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.3:-:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.3:patch1:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.3:patch2:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.3:patch3:*:*:*:*:*:*
History

20 Sep 2024, 16:58

Type Values Removed Values Added
First Time Cisco
Cisco identity Services Engine
CVSS v2 : unknown
v3 : 6.0 		v2 : unknown
v3 : 6.7
References () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-6kn9tSxm - () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-6kn9tSxm - Vendor Advisory
CPE cpe:2.3:a:cisco:identity_services_engine:3.3:patch2:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch3:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.3:patch1:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch6:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.3:patch3:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch4:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch2:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.3:-:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch5:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:patch1:*:*:*:*:*:*
cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*

05 Sep 2024, 12:53

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad en comandos CLI específicos en Cisco Identity Services Engine (ISE) podría permitir que un atacante local autenticado realice ataques de inyección de comandos en el sistema operativo subyacente y eleve los privilegios a superusuario. Para explotar esta vulnerabilidad, el atacante debe tener privilegios de administrador válidos en un dispositivo afectado. Esta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad enviando un comando CLI diseñado. Una explotación exitosa podría permitir al atacante elevar los privilegios a superusuario.

04 Sep 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-04 17:15

Updated : 2024-09-20 16:58

NVD link : CVE-2024-20469

Mitre link : CVE-2024-20469

CVE.ORG link : CVE-2024-20469

JSON object : View

Products Affected

cisco

  • identity_services_engine
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')