CVE-2024-20411: Cisco NX-OS Bash Arbitrary Code Execution Vulnerability
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code as root on an affected device. This vulnerability is due to insufficient security restrictions when executing commands from the Bash shell. An attacker with privileges to access the Bash shell could exploit this vulnerability by executing a specific crafted command on the underlying operating system. A successful exploit could allow the attacker to execute arbitrary code with the privileges of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20411?
CVE-2024-20411 is considered a critical vulnerability, allowing an authenticated local attacker to execute arbitrary code as root.
How do I fix CVE-2024-20411?
To remediate CVE-2024-20411, update the Cisco NX-OS Software to the latest version where the vulnerability is patched.
Who is affected by CVE-2024-20411?
CVE-2024-20411 affects devices running vulnerable versions of Cisco NX-OS Software that allow access to the Bash shell.
What types of attacks can exploit CVE-2024-20411?
CVE-2024-20411 can be exploited by an authenticated local attacker to execute arbitrary commands with root privileges.
Is CVE-2024-20411 being actively exploited?
As of now, there are no confirmed reports of active exploitation of CVE-2024-20411, but the vulnerability is critical and should be addressed promptly.