VDB
CVE-2024-20439
CVE-2024-20439
PUBLISHED
KEV
CVSS 9.800000190734863 CRITICAL
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
EPSS 97.09% · 99.9th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
97.09%
99.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Meraki SM Agent | |
| Cisco | Smart Licensing Utility | |
| Cisco | Cisco Smart License Utility | 2.0.0, 2.2.0, 2.1.0 |
| cisco | smart_license_utility | 2.0.0, 2.0.0, 2.0.0 |
| cisco | cisco_smart_license_utility | 2.2.0, 2.1.0, 2.0.0 |
Timeline
- CVE Published
- Jan 20, 1970 Nuclei Template
- Jan 20, 1970 Fix Commit
- Nov 6, 2023 CrowdSec Sighting
- Nov 20, 2023 CrowdSec Sighting
- Feb 6, 2024 CrowdSec Sighting
- Mar 7, 2024 CrowdSec Sighting
- Apr 26, 2024 CrowdSec Sighting
- Apr 27, 2024 CrowdSec Sighting
- Apr 29, 2024 CrowdSec Sighting
- May 20, 2024 CrowdSec Sighting
- May 30, 2024 CrowdSec Sighting
References
- Nuclei Template exploit
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20439 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-20439 advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw url
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meraki-agent-dll-hj-Ptn7PtKe advisory