HIGH✓ PATCH🇬🇧 English

CVE-2024-20435

CVSS 8.8v3.1pub. 2024-07-17upd. 2025-08-08

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
  • Cisco Asyncos

    OS
    Cisco
    11.7.0-40611.7.0-41811.7.1-00611.7.1-02011.7.1-04911.7.2-01111.8.0-41411.8.1-02311.8.3-01811.8.3-02112.0.1-26812.0.3-00712.5.1-01112.5.2-00712.5.4-005+ 12 więcej
  • Cisco Secure Web Appliance S196

    HW
    Cisco
    wszystkie wersje
  • Cisco Secure Web Appliance S396

    HW
    Cisco
    wszystkie wersje
  • Cisco Secure Web Appliance S696

    HW
    Cisco
    wszystkie wersje
  • Cisco Secure Web Appliance Virtual S1000v

    APP
    Cisco
    wszystkie wersje
  • Cisco Secure Web Appliance Virtual S100v

    APP
    Cisco
    wszystkie wersje
  • Cisco Secure Web Appliance Virtual S300v

    APP
    Cisco
    wszystkie wersje
  • Cisco Secure Web Appliance Virtual S600v

    APP
    Cisco
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2025-20393CRITICAL10.0⚠ KEVPL ✓ten sam produkt

RCE z uprawnieniami root w Cisco Secure Email Gateway i Secure Email and Web Manager

CVE-2022-20653HIGH7.5ten sam produkt

A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco...

CVE-2021-34741HIGH7.5ten sam produkt

A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (...

CVE-2021-34698HIGH8.6ten sam produkt

A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an un...

CVE-2021-1566HIGH7.4ten sam produkt

A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for ...