Arbitrary Code Execution Vulnerability in Cisco Meraki Systems Manager for Windows

CVE-2024-20430

Summary

A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows allows an authenticated, local attacker to execute arbitrary code with elevated privileges. This issue arises from the improper handling of directory search paths during runtime. A low-privileged attacker could exploit this flaw by placing malicious configuration and DLL files onto the compromised system, which would subsequently be read and executed when the Cisco Meraki SM launches at startup. If successfully exploited, this vulnerability enables the attacker to gain SYSTEM-level privileges, leading to a significant compromise of the affected system.

News Articles

Cyber Security News

CVE-2024-20430

Cisco Systems Manager for Windows Vulnerability Let Attackers Escalate Privilege

Cisco Systems Manager Vulnerability, CVE-2024-20430, allows authenticated local attackers to execute arbitrary code.

5 months ago

References