CVE-2024-20389: High severity Cisco ConfD CLI vulnerability
A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.
This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20389?
CVE-2024-20389 is rated as high severity due to its potential impact on system integrity.
How do I fix CVE-2024-20389?
Fixing CVE-2024-20389 involves applying the latest security patches provided by Cisco for both the ConfD CLI and Crosswork Network Services Orchestrator CLI.
What type of attack does CVE-2024-20389 allow?
CVE-2024-20389 allows an authenticated, low-privileged local attacker to read and write arbitrary files as root.
Which products are affected by CVE-2024-20389?
CVE-2024-20389 affects the Cisco ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI.
What caused the vulnerability in CVE-2024-20389?
The vulnerability in CVE-2024-20389 is due to improper authorization enforcement in the affected CLI applications.