A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an affected device.
This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the prompt. A successful exploit could allow the attacker to elevate privileges to root.
References
Configurations
No configuration.
History
12 Sep 2024, 12:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
11 Sep 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-09-11 17:15
Updated : 2024-09-12 12:35
NVD link : CVE-2024-20398
Mitre link : CVE-2024-20398
CVE.ORG link : CVE-2024-20398
JSON object : View
Products Affected
No product.
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')