Command Injection Vulnerability in Cisco ThousandEyes Web Interface

CVE-2024-20277

What is CVE-2024-20277?

A flaw in the web-based management interface of Cisco ThousandEyes Enterprise Agent, specifically for the Virtual Appliance installation, permits remote authenticated attackers to conduct command injection attacks. This arises from inadequate validation of user-supplied input. By crafting and sending malicious HTTP packets to the affected device, an attacker can potentially execute arbitrary commands, thereby escalating privileges to root. This vulnerability underscores the importance of robust input validation mechanisms to protect critical management interfaces.

References