CVE-2024-20325 — Vulnetix

CVE-2024-20325 PUBLISHED

Es besteht eine Schwachstelle in Cisco Unified Intelligence Center. Dies ist auf eine unzureichende Zugriffskontrolle zurückzuführen. Durch das Senden einer Cluster-Konfigurations-CLI-Anfrage an bestimmte Verzeichnisse kann ein lokaler Angreifer diese Schwachstelle ausnutzen, um Dateien zu lesen und zu manipulieren.

EPSS 0.07% · 22.1th percentile

Risk Scores

EPSS Score

0.07%

22.1th percentile

Exploit Intelligence

CIRCL seen: CVE-2024-20325 (circl-sighting)
CIRCL seen: CVE-2024-20325 (circl-sighting)
CIRCL seen: CVE-2024-20325 (circl-sighting)
CIRCL seen: CVE-2024-20325 (circl-sighting)
cisco-sa-cuic-access-control-jJsZQMjj (circl)

Timeline

Feb 21, 2024 CVE Published
Feb 21, 2024 PoC Published
Feb 21, 2024 PoC Published
Feb 22, 2024 EPSS Score
Feb 22, 2024 PoC Published
Mar 13, 2024 PoC Published
Mar 20, 2024 EPSS Score
Apr 16, 2024 EPSS Score
May 12, 2024 EPSS Score
Jun 8, 2024 EPSS Score
Jul 5, 2024 EPSS Score
Aug 1, 2024 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0447.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0447 advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-access-control-jJsZQMjj advisory

Open in Interactive Console →