Command Injection Vulnerability in Cisco ThousandEyes Web Interface
CVE-2024-20277

8HIGH

Key Information:

Vendor
Cisco
Status
Cisco ThousandEyes Recorder Application
Vendor
CVE Published:
17 January 2024

Summary

A flaw in the web-based management interface of Cisco ThousandEyes Enterprise Agent, specifically for the Virtual Appliance installation, permits remote authenticated attackers to conduct command injection attacks. This arises from inadequate validation of user-supplied input. By crafting and sending malicious HTTP packets to the affected device, an attacker can potentially execute arbitrary commands, thereby escalating privileges to root. This vulnerability underscores the importance of robust input validation mechanisms to protect critical management interfaces.

Affected Version(s)

Cisco ThousandEyes Recorder Application

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.