CVE-2024-20413: Cisco NX-OS Bash Privilege Escalation Vulnerability
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing application arguments from the Bash shell. An attacker with privileges to access the Bash shell could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to create new users with the privileges of network-admin.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20413?
CVE-2024-20413 is rated as high severity due to its potential to allow privilege escalation on affected devices.
How do I fix CVE-2024-20413?
To mitigate CVE-2024-20413, update your Cisco NX-OS Software to the latest version provided by Cisco.
Who is affected by CVE-2024-20413?
CVE-2024-20413 affects devices running vulnerable versions of Cisco NX-OS Software with accessible Bash shell privileges.
What types of attacks can CVE-2024-20413 facilitate?
CVE-2024-20413 can facilitate attacks that result in unauthorized privilege escalation to network-admin.
Is CVE-2024-20413 being actively exploited?
As of now, there is no known active exploitation of CVE-2024-20413, but it is recommended to apply patches as a precaution.