CVE-2024-20418: Cisco Ultra-Reliable Wireless Backhaul Software Command Injection Vulnerability
First published: Wed Nov 06 2024(Updated: )
A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points could allow an unauthenticated, remote attacker to perform command injection attacks with root privileges on the underlying operating system. This vulnerability is due to improper validation of input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system of the affected device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Industrial Wireless Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-backhaul-ap-cmdinj-R7E28Ecs
- https://www.bleepingcomputer.com/news/security/cisco-bug-lets-hackers-run-commands-as-root-on-uwrb-access-points/
- https://www.theregister.com/2024/11/07/cisco_uiws_flaw/
- https://www.bleepingcomputer.com/news/security/cisco-warns-of-denial-of-service-flaw-with-poc-exploit-code/
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the severity of CVE-2024-20418?
CVE-2024-20418 has a critical severity rating due to its potential for remote command injection with root privileges.
How do I fix CVE-2024-20418?
To remediate CVE-2024-20418, users should apply the latest software updates provided by Cisco for Unified Industrial Wireless Software.
Who is affected by CVE-2024-20418?
CVE-2024-20418 affects Cisco Unified Industrial Wireless Software used in Cisco Ultra-Reliable Wireless Backhaul Access Points.
Can CVE-2024-20418 be exploited remotely?
Yes, CVE-2024-20418 can be exploited by an unauthenticated remote attacker.
What kind of attack can CVE-2024-20418 enable?
CVE-2024-20418 can enable command injection attacks, allowing attackers to execute commands with root privileges.
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- agent/type
- agent/severity
- agent/author
- collector/nvd-api
- source/NVD
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2024-20418
- alias/CVE-2024-20399
- alias/CVE-2024-3400
- alias/CVE-2024-21887
- collector/the-register
- source/The Register
- agent/references
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- alias/CVE-2025-20128
- alias/CVE-2025-20165
- alias/CVE-2025-20156
- alias/CVE-2024-20481
- agent/news-ai
- exploited/true