CVE-2024-20356 — Vulnetix

CVE-2024-20356 PUBLISHED

Es besteht eine Schwachstelle im Cisco Integrated Management Controller. Dieser Fehler besteht in der webbasierten Management-Schnittstelle aufgrund einer unzureichenden Validierung der Benutzereingaben. Ein entfernter, privilegierter Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern.

EPSS 34.08% · 97.1th percentile

Risk Scores

EPSS Score

34.08%

97.1th percentile

Affected Products

Vendor	Product	Versions
Cisco	Cisco Integrated Management Controller

Exploit Intelligence

A oxidized version of https://github.com/nettitude/CVE-2024-20356/blob/main/CVE-2024-20356.py (github-poc)
A oxidized version of https://github.com/nettitude/CVE-2024-20356/blob/main/CVE-2024-20356.py (github-poc)
A oxidized version of https://github.com/nettitude/CVE-2024-20356/blob/main/CVE-2024-20356.py (github-poc)
A oxidized version of https://github.com/nettitude/CVE-2024-20356/blob/main/CVE-2024-20356.py (github-poc)
A oxidized version of https://github.com/nettitude/CVE-2024-20356/blob/main/CVE-2024-20356.py (github-poc)
A oxidized version of https://github.com/nettitude/CVE-2024-20356/blob/main/CVE-2024-20356.py (github-poc)
This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC. (github-poc)
This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC. (github-poc)
This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC. (github-poc)
This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC. (github-poc)

…and 12 more exploits

Timeline

Apr 17, 2024 CVE Published
Apr 25, 2024 EPSS Score
Jun 14, 2024 EPSS Score
Jul 9, 2024 EPSS Score
Aug 27, 2024 EPSS Score
Sep 21, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Nov 9, 2024 EPSS Score
Dec 29, 2024 EPSS Score
Jan 22, 2025 EPSS Score
Mar 13, 2025 EPSS Score
Mar 19, 2025 EPSS Score

References

Open in Interactive Console →