CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-07-01
Cisco NX-OS CLI Command Injection Vulnerability (CVE-2024-20399) Security Advisory
[Affected Scope] Cisco NX-OS Software running on Nexus series switches with authenticated Administrator credentials
[Impact] Authenticated administrators can bypass CLI sandboxing and execute arbitrary commands as root on the underlying Linux operating system due to insufficient argument validation
[Mitigation] Apply official Cisco NX-OS software updates immediately and restrict administrative CLI access using robust AAA and ACLs