CVE-2024-20295: OS Command Injection
A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or higher privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20295?
CVE-2024-20295 is considered a high severity vulnerability due to its potential for command injection and privilege escalation to root.
How do I fix CVE-2024-20295?
To mitigate CVE-2024-20295, ensure that you update the Cisco Integrated Management Controller to the latest patched version provided by Cisco.
Who is affected by CVE-2024-20295?
CVE-2024-20295 affects authenticated local users of Cisco Integrated Management Controller who have read-only or higher privileges.
What type of attack does CVE-2024-20295 allow?
CVE-2024-20295 allows authenticated attackers to perform command injection attacks, potentially compromising system integrity.
Can CVE-2024-20295 be exploited remotely?
No, CVE-2024-20295 requires local access, meaning the attacker must be authenticated and have access to the device.