CVE-2024-20370
MEDIUMDescription
A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to elevate their administrative privileges to root. The attacker would need valid administrative credentials on the device to exploit this vulnerability. This vulnerability exists because certain system configurations and executable files have insecure storage and permissions. An attacker could exploit this vulnerability by authenticating on the device and then performing a series of steps that includes downloading malicious system files and accessing the Cisco FXOS CLI to configure the attack. A successful exploit could allow the attacker to obtain root access on the device.
Is your site exposed to CVE-2024-20370?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2024-20370? +
How severe is CVE-2024-20370? +
How do I check if I'm vulnerable to CVE-2024-20370? +
Related Vulnerabilities
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows …
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.
Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.