CVE-2024-20531: Cisco Identity Services Engine XML External Entity Injection Vulnerability
First published: Wed Nov 06 2024(Updated: )
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device and conduct a server-side request forgery (SSRF) attack through an affected device. To exploit this vulnerability, the attacker would need valid Super Admin credentials. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing XML input. An attacker could exploit this vulnerability by sending a crafted API request to an affected device. A successful exploit could allow the attacker to read arbitrary files on the underlying operating system or conduct an SSRF attack through the affected device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Identity Services Engine | =3.0.0 | |
| Cisco Identity Services Engine | =3.0.0-patch1 | |
| Cisco Identity Services Engine | =3.0.0-patch2 | |
| Cisco Identity Services Engine | =3.0.0-patch3 | |
| Cisco Identity Services Engine | =3.0.0-patch4 | |
| Cisco Identity Services Engine | =3.0.0-patch5 | |
| Cisco Identity Services Engine | =3.0.0-patch6 | |
| Cisco Identity Services Engine | =3.0.0-patch7 | |
| Cisco Identity Services Engine | =3.0.0-patch8 | |
| Cisco Identity Services Engine | =3.1.0 | |
| Cisco Identity Services Engine | =3.1.0-patch1 | |
| Cisco Identity Services Engine | =3.1.0-patch2 | |
| Cisco Identity Services Engine | =3.1.0-patch3 | |
| Cisco Identity Services Engine | =3.1.0-patch4 | |
| Cisco Identity Services Engine | =3.1.0-patch5 | |
| Cisco Identity Services Engine | =3.1.0-patch6 | |
| Cisco Identity Services Engine | =3.1.0-patch7 | |
| Cisco Identity Services Engine | =3.1.0-patch8 | |
| Cisco Identity Services Engine | =3.1.0-patch9 | |
| Cisco Identity Services Engine | =3.2.0 | |
| Cisco Identity Services Engine | =3.2.0-patch1 | |
| Cisco Identity Services Engine | =3.2.0-patch2 | |
| Cisco Identity Services Engine | =3.2.0-patch3 | |
| Cisco Identity Services Engine | =3.2.0-patch4 | |
| Cisco Identity Services Engine | =3.2.0-patch5 | |
| Cisco Identity Services Engine | =3.2.0-patch6 | |
| Cisco Identity Services Engine | =3.3.0 | |
| Cisco Identity Services Engine | =3.3.0-patch1 | |
| Cisco Identity Services Engine | =3.3.0-patch2 | |
| Cisco Identity Services Engine | =3.3.0-patch3 | |
| Cisco Identity Services Engine | =3.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-20531?
CVE-2024-20531 has been classified as a critical vulnerability that allows remote authenticated attackers to read arbitrary files and perform SSRF attacks.
How do I fix CVE-2024-20531?
To remediate CVE-2024-20531, users should apply the latest patches released for Cisco Identity Services Engine versions affected by this vulnerability.
Which versions of Cisco Identity Services Engine are affected by CVE-2024-20531?
CVE-2024-20531 affects Cisco Identity Services Engine versions 3.0.0 through 3.4.0, including various patches.
What type of attack can be executed through CVE-2024-20531?
CVE-2024-20531 can be exploited to conduct server-side request forgery (SSRF) attacks on the affected device.
Who can exploit CVE-2024-20531?
Only authenticated remote attackers can exploit CVE-2024-20531 to read files on the underlying operating system.
- agent/references
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/cisco
- canonical/cisco identity services engine
- version/cisco identity services engine/3.0.0
- version/cisco identity services engine/3.0.0-patch1
- version/cisco identity services engine/3.0.0-patch2
- version/cisco identity services engine/3.0.0-patch3
- version/cisco identity services engine/3.0.0-patch4
- version/cisco identity services engine/3.0.0-patch5
- version/cisco identity services engine/3.0.0-patch6
- version/cisco identity services engine/3.0.0-patch7
- version/cisco identity services engine/3.0.0-patch8
- version/cisco identity services engine/3.1.0
- version/cisco identity services engine/3.1.0-patch1
- version/cisco identity services engine/3.1.0-patch2
- version/cisco identity services engine/3.1.0-patch3
- version/cisco identity services engine/3.1.0-patch4
- version/cisco identity services engine/3.1.0-patch5
- version/cisco identity services engine/3.1.0-patch6
- version/cisco identity services engine/3.1.0-patch7
- version/cisco identity services engine/3.1.0-patch8
- version/cisco identity services engine/3.1.0-patch9
- version/cisco identity services engine/3.2.0
- version/cisco identity services engine/3.2.0-patch1
- version/cisco identity services engine/3.2.0-patch2
- version/cisco identity services engine/3.2.0-patch3
- version/cisco identity services engine/3.2.0-patch4
- version/cisco identity services engine/3.2.0-patch5
- version/cisco identity services engine/3.2.0-patch6
- version/cisco identity services engine/3.3.0
- version/cisco identity services engine/3.3.0-patch1
- version/cisco identity services engine/3.3.0-patch2
- version/cisco identity services engine/3.3.0-patch3
- version/cisco identity services engine/3.4.0