CVE-2024-20413

MEDIUM Year: 2024
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-862
View all →

Vulnerability Description

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing application arguments from the Bash shell. An attacker with privileges to access the Bash shell could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to create new users with the privileges of network-admin.

Related Vulnerabilities

CVE-2017-6598

MEDIUM
CVSS:6.7(Medium)

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security A...

CWE-8622017

CVE-2017-8083

MEDIUM
CVSS:6.7(Medium)

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a f...

CWE-8622017

CVE-2020-15780

MEDIUM
CVSS:6.7(Medium)

An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot ...

CWE-8622020

CVE-2020-26231

MEDIUM
CVSS:6.7(Medium)

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-15247 (fixed in 1.0.469 and 1.1.0) was discovered that has the same impact as CVE-2020...

CWE-8622020

CVE-2020-27777

MEDIUM
CVSS:6.7(Medium)

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (...

CWE-8622020

CVE-2020-9209

MEDIUM
CVSS:6.7(Medium)

There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vu...

CWE-8622020