Common Weakness Enumeration

CWE-78

Allowed

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Abstraction: Base · Status: Stable

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

8357 vulnerabilities reference this CWE, most recent first.

CVE-2024-20459 (GCVE-0-2024-20459)

Vulnerability from cvelistv5 – Published: 2024-10-16 16:16 – Updated: 2024-10-16 17:56

Title

Cisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware Command Injection Vulnerability

Summary

A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with high privileges to execute arbitrary commands as the root user on the underlying operating system. This vulnerability is due to a lack of input sanitization in the web-based management interface. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco Analog Telephone Adaptor (ATA) Software	Affected: 12.0.1 SR2 Affected: 11.1.0 Affected: 12.0.1 SR1 Affected: 11.1.0 MSR1 Affected: 12.0.1 Affected: 11.1.0 MSR2 Affected: 11.1.0 MSR3 Affected: 11.1.0 MSR4 Affected: 12.0.1 SR3 Affected: 11.2.1 Affected: 12.0.1 SR4 Affected: 11.2.2 Affected: 11.2.2 MSR1 Affected: 12.0.1 SR5 Affected: 11.2.3 Affected: 11.2.4
cisco	ata_190_firmware	Affected: 11.1.0 Affected: 11.1.0_msr1 Affected: 11.1.0_msr2 Affected: 11.1.0_msr3 Affected: 11.1.0_msr4 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.2_msr1 Affected: 11.2.3 Affected: 11.2.4 Affected: 12.0.1_sr1 Affected: 12.0.1_sr2 Affected: 12.0.1_sr3 Affected: 12.0.1_sr4 Affected: 12.0.1_sr5 Affected: 121.0.1 cpe:2.3:o:cisco:ata_190_firmware:11.1.0:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr1:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr2:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr3:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr4:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.1:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.2:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.2_msr1:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.3:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.4:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr1:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr2:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr3:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr4:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr5:::::::* cpe:2.3:o:cisco:ata_190_firmware:121.0.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.2_msr1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:121.0.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ata_190_firmware",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "11.1.0"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr1"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr2"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr3"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr4"
              },
              {
                "status": "affected",
                "version": "11.2.1"
              },
              {
                "status": "affected",
                "version": "11.2.2"
              },
              {
                "status": "affected",
                "version": "11.2.2_msr1"
              },
              {
                "status": "affected",
                "version": "11.2.3"
              },
              {
                "status": "affected",
                "version": "11.2.4"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr1"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr2"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr3"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr4"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr5"
              },
              {
                "status": "affected",
                "version": "121.0.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20459",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-16T17:48:02.995970Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-16T17:56:02.319Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Analog Telephone Adaptor (ATA) Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "12.0.1 SR2"
            },
            {
              "status": "affected",
              "version": "11.1.0"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR1"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR1"
            },
            {
              "status": "affected",
              "version": "12.0.1"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR2"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR3"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR4"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR3"
            },
            {
              "status": "affected",
              "version": "11.2.1"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR4"
            },
            {
              "status": "affected",
              "version": "11.2.2"
            },
            {
              "status": "affected",
              "version": "11.2.2 MSR1"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR5"
            },
            {
              "status": "affected",
              "version": "11.2.3"
            },
            {
              "status": "affected",
              "version": "11.2.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with high privileges to execute arbitrary commands as the root user on the underlying operating system.\r\n\r\nThis vulnerability is due to a lack of input sanitization in the web-based management interface. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-16T16:16:12.834Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ata19x-multi-RDTEqRsy",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ata19x-multi-RDTEqRsy",
        "defects": [
          "CSCwf28499"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware Command Injection Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20459",
    "datePublished": "2024-10-16T16:16:12.834Z",
    "dateReserved": "2023-11-08T15:08:07.679Z",
    "dateUpdated": "2024-10-16T17:56:02.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20458 (GCVE-0-2024-20458)

Vulnerability from cvelistv5 – Published: 2024-10-16 16:16 – Updated: 2024-10-16 19:38

Title

Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities

Summary

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on specific HTTP endpoints. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view or delete the configuration or change the firmware.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco Analog Telephone Adaptor (ATA) Software	Affected: 12.0.1 SR2 Affected: 11.1.0 Affected: 12.0.1 SR1 Affected: 11.1.0 MSR1 Affected: 12.0.1 Affected: 11.1.0 MSR2 Affected: 11.1.0 MSR3 Affected: 11.1.0 MSR4 Affected: 12.0.1 SR3 Affected: 11.2.1 Affected: 12.0.1 SR4 Affected: 11.2.2 Affected: 11.2.2 MSR1 Affected: 12.0.1 SR5 Affected: 11.2.3 Affected: 11.2.4
cisco	ata_190_firmware	Affected: 11.1.0 Affected: 11.1.0_msr1 Affected: 11.1.0_msr2 Affected: 11.1.0_msr3 Affected: 11.1.0_msr4 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.2_msr1 Affected: 11.2.3 Affected: 11.2.4 Affected: 12.0.1_sr1 Affected: 12.0.1_sr2 Affected: 12.0.1_sr3 Affected: 12.0.1_sr4 Affected: 12.0.1_sr5 Affected: 12.0.1 cpe:2.3:o:cisco:ata_190_firmware:11.1.0:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr1:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr2:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr3:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr4:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.1:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.2:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.2_msr1:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.3:::::::* cpe:2.3:o:cisco:ata_190_firmware:11.2.4:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr1:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr2:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr3:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr4:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr5:::::::* cpe:2.3:o:cisco:ata_190_firmware:12.0.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.1.0_msr4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.2_msr1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:11.2.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ata_190_firmware:12.0.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ata_190_firmware",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "11.1.0"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr1"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr2"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr3"
              },
              {
                "status": "affected",
                "version": "11.1.0_msr4"
              },
              {
                "status": "affected",
                "version": "11.2.1"
              },
              {
                "status": "affected",
                "version": "11.2.2"
              },
              {
                "status": "affected",
                "version": "11.2.2_msr1"
              },
              {
                "status": "affected",
                "version": "11.2.3"
              },
              {
                "status": "affected",
                "version": "11.2.4"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr1"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr2"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr3"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr4"
              },
              {
                "status": "affected",
                "version": "12.0.1_sr5"
              },
              {
                "status": "affected",
                "version": "12.0.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20458",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-16T19:34:22.795329Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-16T19:38:32.175Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Analog Telephone Adaptor (ATA) Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "12.0.1 SR2"
            },
            {
              "status": "affected",
              "version": "11.1.0"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR1"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR1"
            },
            {
              "status": "affected",
              "version": "12.0.1"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR2"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR3"
            },
            {
              "status": "affected",
              "version": "11.1.0 MSR4"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR3"
            },
            {
              "status": "affected",
              "version": "11.2.1"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR4"
            },
            {
              "status": "affected",
              "version": "11.2.2"
            },
            {
              "status": "affected",
              "version": "11.2.2 MSR1"
            },
            {
              "status": "affected",
              "version": "12.0.1 SR5"
            },
            {
              "status": "affected",
              "version": "11.2.3"
            },
            {
              "status": "affected",
              "version": "11.2.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device.\r\n\r\nThis vulnerability is due to a lack of authentication on specific HTTP endpoints. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view or delete the configuration or change the firmware."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-16T16:16:04.241Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ata19x-multi-RDTEqRsy",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ata19x-multi-RDTEqRsy",
        "defects": [
          "CSCwf28097"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20458",
    "datePublished": "2024-10-16T16:16:04.241Z",
    "dateReserved": "2023-11-08T15:08:07.679Z",
    "dateUpdated": "2024-10-16T19:38:32.175Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20424 (GCVE-0-2024-20424)

Vulnerability from cvelistv5 – Published: 2024-10-23 17:46 – Updated: 2024-10-26 03:55

Summary

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to insufficient input validation of certain HTTP requests. An attacker could exploit this vulnerability by authenticating to the web-based management interface of an affected device and then sending a crafted HTTP request to the device. A successful exploit could allow the attacker to execute arbitrary commands with root permissions on the underlying operating system of the Cisco FMC device or to execute commands on managed Cisco Firepower Threat Defense (FTD) devices. To exploit this vulnerability, the attacker would need valid credentials for a user account with at least the role of Security Analyst (Read Only).

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco Firepower Management Center	Affected: 6.2.3 Affected: 6.2.3.1 Affected: 6.2.3.2 Affected: 6.2.3.3 Affected: 6.2.3.4 Affected: 6.2.3.5 Affected: 6.2.3.6 Affected: 6.2.3.7 Affected: 6.2.3.9 Affected: 6.2.3.10 Affected: 6.2.3.11 Affected: 6.2.3.12 Affected: 6.2.3.13 Affected: 6.2.3.14 Affected: 6.2.3.15 Affected: 6.2.3.8 Affected: 6.2.3.16 Affected: 6.2.3.17 Affected: 6.2.3.18 Affected: 6.4.0 Affected: 6.4.0.1 Affected: 6.4.0.3 Affected: 6.4.0.2 Affected: 6.4.0.4 Affected: 6.4.0.5 Affected: 6.4.0.6 Affected: 6.4.0.7 Affected: 6.4.0.8 Affected: 6.4.0.9 Affected: 6.4.0.10 Affected: 6.4.0.11 Affected: 6.4.0.12 Affected: 6.4.0.13 Affected: 6.4.0.14 Affected: 6.4.0.15 Affected: 6.4.0.16 Affected: 6.4.0.17 Affected: 6.4.0.18 Affected: 6.6.0 Affected: 6.6.0.1 Affected: 6.6.1 Affected: 6.6.3 Affected: 6.6.4 Affected: 6.6.5 Affected: 6.6.5.1 Affected: 6.6.5.2 Affected: 6.6.7 Affected: 6.6.7.1 Affected: 6.6.7.2 Affected: 6.7.0 Affected: 6.7.0.1 Affected: 6.7.0.2 Affected: 6.7.0.3 Affected: 7.0.0 Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.0.4 Affected: 7.0.5 Affected: 7.0.6 Affected: 7.0.6.1 Affected: 7.0.6.2 Affected: 7.1.0 Affected: 7.1.0.1 Affected: 7.1.0.2 Affected: 7.1.0.3 Affected: 7.2.0 Affected: 7.2.1 Affected: 7.2.2 Affected: 7.2.0.1 Affected: 7.2.3 Affected: 7.2.3.1 Affected: 7.2.4 Affected: 7.2.4.1 Affected: 7.2.5 Affected: 7.2.5.1 Affected: 7.2.6 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.2.8 Affected: 7.2.8.1 Affected: 7.3.0 Affected: 7.3.1 Affected: 7.3.1.1 Affected: 7.3.1.2 Affected: 7.4.0 Affected: 7.4.1 Affected: 7.4.1.1 Affected: 7.4.2
cisco	firepower_management_center	Affected: 6.2.3 Affected: 6.2.3.1 Affected: 6.2.3.2 Affected: 6.2.3.3 Affected: 6.2.3.4 Affected: 6.2.3.5 Affected: 6.2.3.6 Affected: 6.2.3.7 Affected: 6.2.3.9 Affected: 6.2.3.10 Affected: 6.2.3.11 Affected: 6.2.3.12 Affected: 6.2.3.13 Affected: 6.2.3.14 Affected: 6.2.3.15 Affected: 6.2.3.8 Affected: 6.2.3.16 Affected: 6.2.3.17 Affected: 6.2.3.18 Affected: 6.4.0 Affected: 6.4.0.1 Affected: 6.4.0.3 Affected: 6.4.0.2 Affected: 6.4.0.4 Affected: 6.4.0.5 Affected: 6.4.0.6 Affected: 6.4.0.7 Affected: 6.4.0.8 Affected: 6.4.0.9 Affected: 6.4.0.10 Affected: 6.4.0.11 Affected: 6.4.0.12 Affected: 6.4.0.13 Affected: 6.4.0.14 Affected: 6.4.0.15 Affected: 6.4.0.16 Affected: 6.4.0.17 Affected: 6.4.0.18 Affected: 6.6.0 Affected: 6.6.0.1 Affected: 6.6.1 Affected: 6.6.3 Affected: 6.6.4 Affected: 6.6.5 Affected: 6.6.5.1 Affected: 6.6.5.2 Affected: 6.6.7 Affected: 6.6.7.1 Affected: 6.6.7.2 Affected: 6.7.0 Affected: 6.7.0.1 Affected: 6.7.0.2 Affected: 6.7.0.3 Affected: 7.0.0 Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.0.4 Affected: 7.0.5 Affected: 7.0.6 Affected: 7.0.6.1 Affected: 7.0.6.2 Affected: 7.1.0 Affected: 7.1.0.1 Affected: 7.1.0.2 Affected: 7.1.0.3 Affected: 7.2.0 Affected: 7.2.1 Affected: 7.2.2 Affected: 7.2.0.1 Affected: 7.2.3 Affected: 7.2.3.1 Affected: 7.2.4 Affected: 7.2.4.1 Affected: 7.2.5 Affected: 7.2.5.1 Affected: 7.2.6 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.2.8 Affected: 7.2.8.1 Affected: 7.3.0 Affected: 7.3.1 Affected: 7.3.1.1 Affected: 7.3.1.2 Affected: 7.4.0 Affected: 7.4.1 Affected: 7.4.1.1 Affected: 7.4.2 cpe:2.3:a:cisco:firepower_management_center::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firepower_management_center",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "6.2.3"
              },
              {
                "status": "affected",
                "version": "6.2.3.1"
              },
              {
                "status": "affected",
                "version": "6.2.3.2"
              },
              {
                "status": "affected",
                "version": "6.2.3.3"
              },
              {
                "status": "affected",
                "version": "6.2.3.4"
              },
              {
                "status": "affected",
                "version": "6.2.3.5"
              },
              {
                "status": "affected",
                "version": "6.2.3.6"
              },
              {
                "status": "affected",
                "version": "6.2.3.7"
              },
              {
                "status": "affected",
                "version": "6.2.3.9"
              },
              {
                "status": "affected",
                "version": "6.2.3.10"
              },
              {
                "status": "affected",
                "version": "6.2.3.11"
              },
              {
                "status": "affected",
                "version": "6.2.3.12"
              },
              {
                "status": "affected",
                "version": "6.2.3.13"
              },
              {
                "status": "affected",
                "version": "6.2.3.14"
              },
              {
                "status": "affected",
                "version": "6.2.3.15"
              },
              {
                "status": "affected",
                "version": "6.2.3.8"
              },
              {
                "status": "affected",
                "version": "6.2.3.16"
              },
              {
                "status": "affected",
                "version": "6.2.3.17"
              },
              {
                "status": "affected",
                "version": "6.2.3.18"
              },
              {
                "status": "affected",
                "version": "6.4.0"
              },
              {
                "status": "affected",
                "version": "6.4.0.1"
              },
              {
                "status": "affected",
                "version": "6.4.0.3"
              },
              {
                "status": "affected",
                "version": "6.4.0.2"
              },
              {
                "status": "affected",
                "version": "6.4.0.4"
              },
              {
                "status": "affected",
                "version": "6.4.0.5"
              },
              {
                "status": "affected",
                "version": "6.4.0.6"
              },
              {
                "status": "affected",
                "version": "6.4.0.7"
              },
              {
                "status": "affected",
                "version": "6.4.0.8"
              },
              {
                "status": "affected",
                "version": "6.4.0.9"
              },
              {
                "status": "affected",
                "version": "6.4.0.10"
              },
              {
                "status": "affected",
                "version": "6.4.0.11"
              },
              {
                "status": "affected",
                "version": "6.4.0.12"
              },
              {
                "status": "affected",
                "version": "6.4.0.13"
              },
              {
                "status": "affected",
                "version": "6.4.0.14"
              },
              {
                "status": "affected",
                "version": "6.4.0.15"
              },
              {
                "status": "affected",
                "version": "6.4.0.16"
              },
              {
                "status": "affected",
                "version": "6.4.0.17"
              },
              {
                "status": "affected",
                "version": "6.4.0.18"
              },
              {
                "status": "affected",
                "version": "6.6.0"
              },
              {
                "status": "affected",
                "version": "6.6.0.1"
              },
              {
                "status": "affected",
                "version": "6.6.1"
              },
              {
                "status": "affected",
                "version": "6.6.3"
              },
              {
                "status": "affected",
                "version": "6.6.4"
              },
              {
                "status": "affected",
                "version": "6.6.5"
              },
              {
                "status": "affected",
                "version": "6.6.5.1"
              },
              {
                "status": "affected",
                "version": "6.6.5.2"
              },
              {
                "status": "affected",
                "version": "6.6.7"
              },
              {
                "status": "affected",
                "version": "6.6.7.1"
              },
              {
                "status": "affected",
                "version": "6.6.7.2"
              },
              {
                "status": "affected",
                "version": "6.7.0"
              },
              {
                "status": "affected",
                "version": "6.7.0.1"
              },
              {
                "status": "affected",
                "version": "6.7.0.2"
              },
              {
                "status": "affected",
                "version": "6.7.0.3"
              },
              {
                "status": "affected",
                "version": "7.0.0"
              },
              {
                "status": "affected",
                "version": "7.0.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1.1"
              },
              {
                "status": "affected",
                "version": "7.0.2"
              },
              {
                "status": "affected",
                "version": "7.0.2.1"
              },
              {
                "status": "affected",
                "version": "7.0.3"
              },
              {
                "status": "affected",
                "version": "7.0.4"
              },
              {
                "status": "affected",
                "version": "7.0.5"
              },
              {
                "status": "affected",
                "version": "7.0.6"
              },
              {
                "status": "affected",
                "version": "7.0.6.1"
              },
              {
                "status": "affected",
                "version": "7.0.6.2"
              },
              {
                "status": "affected",
                "version": "7.1.0"
              },
              {
                "status": "affected",
                "version": "7.1.0.1"
              },
              {
                "status": "affected",
                "version": "7.1.0.2"
              },
              {
                "status": "affected",
                "version": "7.1.0.3"
              },
              {
                "status": "affected",
                "version": "7.2.0"
              },
              {
                "status": "affected",
                "version": "7.2.1"
              },
              {
                "status": "affected",
                "version": "7.2.2"
              },
              {
                "status": "affected",
                "version": "7.2.0.1"
              },
              {
                "status": "affected",
                "version": "7.2.3"
              },
              {
                "status": "affected",
                "version": "7.2.3.1"
              },
              {
                "status": "affected",
                "version": "7.2.4"
              },
              {
                "status": "affected",
                "version": "7.2.4.1"
              },
              {
                "status": "affected",
                "version": "7.2.5"
              },
              {
                "status": "affected",
                "version": "7.2.5.1"
              },
              {
                "status": "affected",
                "version": "7.2.6"
              },
              {
                "status": "affected",
                "version": "7.2.7"
              },
              {
                "status": "affected",
                "version": "7.2.5.2"
              },
              {
                "status": "affected",
                "version": "7.2.8"
              },
              {
                "status": "affected",
                "version": "7.2.8.1"
              },
              {
                "status": "affected",
                "version": "7.3.0"
              },
              {
                "status": "affected",
                "version": "7.3.1"
              },
              {
                "status": "affected",
                "version": "7.3.1.1"
              },
              {
                "status": "affected",
                "version": "7.3.1.2"
              },
              {
                "status": "affected",
                "version": "7.4.0"
              },
              {
                "status": "affected",
                "version": "7.4.1"
              },
              {
                "status": "affected",
                "version": "7.4.1.1"
              },
              {
                "status": "affected",
                "version": "7.4.2"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20424",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-25T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-26T03:55:25.923Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Firepower Management Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.2.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.3.2"
            },
            {
              "status": "affected",
              "version": "6.2.3.3"
            },
            {
              "status": "affected",
              "version": "6.2.3.4"
            },
            {
              "status": "affected",
              "version": "6.2.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.3.6"
            },
            {
              "status": "affected",
              "version": "6.2.3.7"
            },
            {
              "status": "affected",
              "version": "6.2.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3.10"
            },
            {
              "status": "affected",
              "version": "6.2.3.11"
            },
            {
              "status": "affected",
              "version": "6.2.3.12"
            },
            {
              "status": "affected",
              "version": "6.2.3.13"
            },
            {
              "status": "affected",
              "version": "6.2.3.14"
            },
            {
              "status": "affected",
              "version": "6.2.3.15"
            },
            {
              "status": "affected",
              "version": "6.2.3.8"
            },
            {
              "status": "affected",
              "version": "6.2.3.16"
            },
            {
              "status": "affected",
              "version": "6.2.3.17"
            },
            {
              "status": "affected",
              "version": "6.2.3.18"
            },
            {
              "status": "affected",
              "version": "6.4.0"
            },
            {
              "status": "affected",
              "version": "6.4.0.1"
            },
            {
              "status": "affected",
              "version": "6.4.0.3"
            },
            {
              "status": "affected",
              "version": "6.4.0.2"
            },
            {
              "status": "affected",
              "version": "6.4.0.4"
            },
            {
              "status": "affected",
              "version": "6.4.0.5"
            },
            {
              "status": "affected",
              "version": "6.4.0.6"
            },
            {
              "status": "affected",
              "version": "6.4.0.7"
            },
            {
              "status": "affected",
              "version": "6.4.0.8"
            },
            {
              "status": "affected",
              "version": "6.4.0.9"
            },
            {
              "status": "affected",
              "version": "6.4.0.10"
            },
            {
              "status": "affected",
              "version": "6.4.0.11"
            },
            {
              "status": "affected",
              "version": "6.4.0.12"
            },
            {
              "status": "affected",
              "version": "6.4.0.13"
            },
            {
              "status": "affected",
              "version": "6.4.0.14"
            },
            {
              "status": "affected",
              "version": "6.4.0.15"
            },
            {
              "status": "affected",
              "version": "6.4.0.16"
            },
            {
              "status": "affected",
              "version": "6.4.0.17"
            },
            {
              "status": "affected",
              "version": "6.4.0.18"
            },
            {
              "status": "affected",
              "version": "6.6.0"
            },
            {
              "status": "affected",
              "version": "6.6.0.1"
            },
            {
              "status": "affected",
              "version": "6.6.1"
            },
            {
              "status": "affected",
              "version": "6.6.3"
            },
            {
              "status": "affected",
              "version": "6.6.4"
            },
            {
              "status": "affected",
              "version": "6.6.5"
            },
            {
              "status": "affected",
              "version": "6.6.5.1"
            },
            {
              "status": "affected",
              "version": "6.6.5.2"
            },
            {
              "status": "affected",
              "version": "6.6.7"
            },
            {
              "status": "affected",
              "version": "6.6.7.1"
            },
            {
              "status": "affected",
              "version": "6.6.7.2"
            },
            {
              "status": "affected",
              "version": "6.7.0"
            },
            {
              "status": "affected",
              "version": "6.7.0.1"
            },
            {
              "status": "affected",
              "version": "6.7.0.2"
            },
            {
              "status": "affected",
              "version": "6.7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.0.2.1"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.6"
            },
            {
              "status": "affected",
              "version": "7.0.6.1"
            },
            {
              "status": "affected",
              "version": "7.0.6.2"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "7.1.0.1"
            },
            {
              "status": "affected",
              "version": "7.1.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "7.2.0.1"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.2.3.1"
            },
            {
              "status": "affected",
              "version": "7.2.4"
            },
            {
              "status": "affected",
              "version": "7.2.4.1"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "7.2.5.1"
            },
            {
              "status": "affected",
              "version": "7.2.6"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.2.5.2"
            },
            {
              "status": "affected",
              "version": "7.2.8"
            },
            {
              "status": "affected",
              "version": "7.2.8.1"
            },
            {
              "status": "affected",
              "version": "7.3.0"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.2"
            },
            {
              "status": "affected",
              "version": "7.4.0"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.1"
            },
            {
              "status": "affected",
              "version": "7.4.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root.\r\n\r This vulnerability is due to insufficient input validation of certain HTTP requests. An attacker could exploit this vulnerability by authenticating to the web-based management interface of an affected device and then sending a crafted HTTP request to the device. A successful exploit could allow the attacker to execute arbitrary commands with root permissions on the underlying operating system of the Cisco FMC device or to execute commands on managed Cisco Firepower Threat Defense (FTD) devices. To exploit this vulnerability, the attacker would need valid credentials for a user account with at least the role of Security Analyst (Read Only)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-23T17:46:24.274Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-fmc-cmd-inj-v3AWDqN7",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-v3AWDqN7"
        }
      ],
      "source": {
        "advisory": "cisco-sa-fmc-cmd-inj-v3AWDqN7",
        "defects": [
          "CSCwj68540"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20424",
    "datePublished": "2024-10-23T17:46:24.274Z",
    "dateReserved": "2023-11-08T15:08:07.666Z",
    "dateUpdated": "2024-10-26T03:55:25.923Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20399 (GCVE-0-2024-20399)

Vulnerability from cvelistv5 – Published: 2024-07-01 16:11 – Updated: 2025-10-21 18:43

Title

Cisco NX-OS Software CLI Command Injection Vulnerability

Summary

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root. Note: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges: Nexus 3000 Series Switches Nexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later Nexus 9000 Series Switches in standalone NX-OS mode

Severity

6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

3 references

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
https://www.sygnia.co/threat-reports-and-advisori…	x_transferred

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco NX-OS Software	Affected: 8.2(5) Affected: 7.3(6)N1(1a) Affected: 7.3(5)D1(1) Affected: 8.4(2) Affected: 7.3(6)N1(1) Affected: 6.2(2) Affected: 8.4(3) Affected: 9.2(3) Affected: 7.0(3)I5(2) Affected: 8.2(1) Affected: 6.0(2)A8(7a) Affected: 7.0(3)I4(5) Affected: 6.0(2)A6(1) Affected: 7.3(1)D1(1) Affected: 6.2(14a) Affected: 7.0(3)I4(6) Affected: 7.3(4)N1(1) Affected: 7.0(3)I4(3) Affected: 9.2(2v) Affected: 6.0(2)A6(5b) Affected: 7.3(0)D1(1) Affected: 6.2(17a) Affected: 7.0(3)I4(7) Affected: 6.0(2)U6(1a) Affected: 7.1(5)N1(1b) Affected: 7.0(3)I4(1) Affected: 7.0(3)I4(8) Affected: 7.0(3)I4(2) Affected: 7.1(4)N1(1c) Affected: 7.0(3)IM3(1) Affected: 6.0(2)U6(5a) Affected: 6.0(2)A8(11) Affected: 6.0(2)A6(4a) Affected: 6.2(9) Affected: 6.2(5) Affected: 7.3(4)D1(1) Affected: 6.2(20) Affected: 9.2(1) Affected: 9.2(2t) Affected: 9.2(3y) Affected: 7.0(3)I4(1t) Affected: 6.0(2)U6(5c) Affected: 6.0(2)A6(4) Affected: 7.0(3)I7(6z) Affected: 9.3(2) Affected: 7.3(1)DY(1) Affected: 7.0(3)F3(3) Affected: 6.0(2)U6(6) Affected: 6.2(29) Affected: 7.0(3)I7(3z) Affected: 7.0(3)IM7(2) Affected: 6.0(2)A8(11b) Affected: 6.2(9a) Affected: 7.3(0)N1(1) Affected: 7.0(3)I7(5a) Affected: 6.2(11d) Affected: 8.1(1) Affected: 7.0(3)I6(1) Affected: 6.0(2)U6(10) Affected: 7.2(2)D1(2) Affected: 7.0(3)IM3(2) Affected: 6.0(2)A6(8) Affected: 8.2(2) Affected: 6.0(2)U6(1) Affected: 7.3(2)N1(1c) Affected: 7.0(3)I5(3b) Affected: 8.3(2) Affected: 7.3(5)N1(1) Affected: 6.0(2)A6(2a) Affected: 7.3(2)N1(1b) Affected: 6.2(27) Affected: 7.3(2)D1(3a) Affected: 7.3(1)N1(1) Affected: 6.0(2)U6(7) Affected: 9.2(4) Affected: 7.1(4)N1(1a) Affected: 7.1(3)N1(4) Affected: 7.0(3)IM3(2a) Affected: 6.2(8b) Affected: 6.0(2)A8(10) Affected: 7.1(3)N1(2) Affected: 6.2(13) Affected: 6.0(2)A8(2) Affected: 7.0(3)IC4(4) Affected: 6.2(1) Affected: 7.3(4)N1(1a) Affected: 8.1(2) Affected: 6.0(2)A6(3) Affected: 6.0(2)U6(5b) Affected: 7.0(3)F3(3c) Affected: 7.3(3)D1(1) Affected: 7.0(3)F3(1) Affected: 6.0(2)U6(5) Affected: 7.0(3)F3(5) Affected: 7.1(2)N1(1) Affected: 7.1(3)N1(3) Affected: 8.2(3) Affected: 6.0(2)A6(7) Affected: 7.0(3)I7(2) Affected: 6.2(5a) Affected: 6.2(18) Affected: 6.0(2)A6(5) Affected: 7.0(3)IM3(2b) Affected: 7.1(3)N1(1) Affected: 6.0(2)U6(4a) Affected: 7.0(3)I5(3) Affected: 7.0(3)I7(3) Affected: 6.0(2)A8(6) Affected: 7.0(3)I6(2) Affected: 8.3(1) Affected: 6.2(3) Affected: 6.2(22) Affected: 7.1(1)N1(1) Affected: 8.4(1) Affected: 8.1(1b) Affected: 7.3(0)N1(1b) Affected: 7.2(2)D1(4) Affected: 6.0(2)A8(5) Affected: 7.3(0)DX(1) Affected: 7.1(4)N1(1d) Affected: 7.3(2)D1(1) Affected: 7.3(2)N1(1) Affected: 6.0(2)U6(8) Affected: 7.1(1)N1(1a) Affected: 7.0(3)IM3(3) Affected: 9.3(1) Affected: 6.0(2)U6(2) Affected: 6.2(9b) Affected: 7.1(3)N1(2a) Affected: 7.3(0)N1(1a) Affected: 6.0(2)A8(7) Affected: 7.0(3)I7(6) Affected: 7.3(2)D1(2) Affected: 6.2(25) Affected: 6.0(2)U6(3a) Affected: 8.0(1) Affected: 6.0(2)A8(11a) Affected: 6.2(11e) Affected: 7.1(3)N1(5) Affected: 7.0(3)I4(8z) Affected: 6.2(11) Affected: 7.0(3)I4(9) Affected: 6.2(16) Affected: 6.2(19) Affected: 8.2(4) Affected: 6.2(2a) Affected: 7.2(2)D1(3) Affected: 7.1(0)N1(1b) Affected: 7.0(3)I7(4) Affected: 7.0(3)I7(7) Affected: 6.2(5b) Affected: 7.3(0)DY(1) Affected: 6.0(2)A8(9) Affected: 6.0(2)A8(1) Affected: 7.1(5)N1(1) Affected: 7.2(1)D1(1) Affected: 6.2(15) Affected: 6.0(2)A6(6) Affected: 6.0(2)A8(10a) Affected: 7.0(3)I5(1) Affected: 9.3(1z) Affected: 9.2(2) Affected: 6.2(7) Affected: 6.2(9c) Affected: 7.0(3)F3(4) Affected: 7.3(3)N1(1) Affected: 6.2(6b) Affected: 7.0(3)I4(8b) Affected: 8.1(2a) Affected: 7.3(2)D1(3) Affected: 6.2(8) Affected: 6.0(2)A8(3) Affected: 6.2(11b) Affected: 7.0(3)I4(6t) Affected: 7.0(3)I5(3a) Affected: 8.1(1a) Affected: 6.2(13a) Affected: 6.0(2)A8(8) Affected: 7.0(3)I7(5) Affected: 7.0(3)F3(3a) Affected: 7.1(0)N1(1a) Affected: 6.0(2)A8(4) Affected: 6.0(2)A6(3a) Affected: 6.0(2)A6(5a) Affected: 7.0(3)F2(1) Affected: 7.0(3)I4(8a) Affected: 6.0(2)U6(9) Affected: 7.0(3)F3(2) Affected: 6.0(2)U6(2a) Affected: 6.2(12) Affected: 6.2(17) Affected: 7.0(3)I4(4) Affected: 6.2(23) Affected: 6.2(13b) Affected: 6.0(2)U6(3) Affected: 6.2(10) Affected: 6.2(6a) Affected: 6.2(6) Affected: 7.1(2)N1(1a) Affected: 6.2(14) Affected: 7.0(3)I7(1) Affected: 6.2(14b) Affected: 6.2(21) Affected: 7.2(2)D1(1) Affected: 7.0(3)F2(2) Affected: 7.0(3)IA7(2) Affected: 7.0(3)IA7(1) Affected: 6.0(2)A8(7b) Affected: 6.2(8a) Affected: 6.2(11c) Affected: 7.0(3)F1(1) Affected: 6.0(2)A6(1a) Affected: 7.1(0)N1(1) Affected: 7.2(0)D1(1) Affected: 6.0(2)A6(2) Affected: 7.1(4)N1(1) Affected: 6.0(2)A8(4a) Affected: 6.2(20a) Affected: 6.0(2)U6(4) Affected: 8.4(1a) Affected: 9.3(3) Affected: 7.3(2)D1(1d) Affected: 7.3(7)N1(1) Affected: 6.2(24) Affected: 6.2(31) Affected: 7.0(3)I7(8) Affected: 6.0(2)U6(10a) Affected: 7.3(7)N1(1a) Affected: 9.3(4) Affected: 7.3(6)D1(1) Affected: 6.2(26) Affected: 8.2(6) Affected: 6.2(33) Affected: 9.3(5) Affected: 8.4(2a) Affected: 8.4(2b) Affected: 7.3(8)N1(1) Affected: 7.0(3)I7(9) Affected: 7.3(7)N1(1b) Affected: 6.2(24a) Affected: 8.5(1) Affected: 9.3(6) Affected: 10.1(2) Affected: 10.1(1) Affected: 8.4(4) Affected: 7.3(7)D1(1) Affected: 8.4(2c) Affected: 9.3(5w) Affected: 8.2(7) Affected: 7.3(9)N1(1) Affected: 9.3(7) Affected: 9.3(7k) Affected: 7.0(3)I7(9w) Affected: 10.2(1) Affected: 7.3(8)N1(1a) Affected: 7.3(8)D1(1) Affected: 9.3(7a) Affected: 8.2(7a) Affected: 9.3(8) Affected: 8.4(4a) Affected: 8.4(2d) Affected: 7.3(10)N1(1) Affected: 8.4(5) Affected: 7.0(3)I7(10) Affected: 7.3(8)N1(1b) Affected: 8.2(8) Affected: 10.2(1q) Affected: 10.2(2) Affected: 9.3(9) Affected: 7.3(9)D1(1) Affected: 7.3(11)N1(1) Affected: 10.2(3) Affected: 8.4(6) Affected: 8.4(2e) Affected: 9.3(10) Affected: 7.3(11)N1(1a) Affected: 10.2(2a) Affected: 7.3(12)N1(1) Affected: 9.2(1a) Affected: 8.2(9) Affected: 10.3(1) Affected: 10.2(4) Affected: 7.3(13)N1(1) Affected: 8.4(7) Affected: 10.3(2) Affected: 8.4(6a) Affected: 9.3(11) Affected: 10.3(3) Affected: 10.2(5) Affected: 9.4(1) Affected: 9.3(2a) Affected: 8.4(2f) Affected: 8.2(10) Affected: 9.3(12) Affected: 10.4(1) Affected: 8.4(8) Affected: 10.3(99w) Affected: 7.3(14)N1(1) Affected: 10.2(6) Affected: 10.3(3w) Affected: 10.3(99x) Affected: 10.3(3o) Affected: 8.4(9) Affected: 10.3(4) Affected: 10.3(3p) Affected: 10.3(4a) Affected: 9.4(1a) Affected: 10.4(2) Affected: 10.3(3q) Affected: 9.3(13) Affected: 8.2(11) Affected: 9.4(2) Affected: 10.3(5) Affected: 10.2(7) Affected: 10.3(3x) Affected: 10.3(4g) Affected: 10.2(8) Affected: 10.3(3r)
cisco	nx-os	Affected: 6.0\(2\)a6\(1\) Affected: 6.0\(2\)A6\(1a\) Affected: 6.0\(2\)A6\(2\) Affected: 6.0\(2\)A6\(2a\) Affected: 6.0\(2\)A6\(3\) Affected: 6.0\(2\)A6\(3a\) Affected: 6.0\(2\)A6\(4\) Affected: 6.0\(2\)A6\(4a\) Affected: 6.0\(2\)A6\(5a\) Affected: 6.0\(2\)A6\(5b\) Affected: 6.0\(2\)A6\(6\) Affected: 6.0\(2\)A6\(7\) Affected: 6.0\(2\)A6\(8\) Affected: 6.0\(2\)A8\(1\) Affected: 6.0\(2\)A8\(2\) Affected: 6.0\(2\)A8\(3\) Affected: 6.0\(2\)A8\(4\) Affected: 6.0\(2\)A8\(4a\) Affected: 6.0\(2\)A8\(5\) Affected: 6.0\(2\)A8\(6\) Affected: 6.0\(2\)A8\(7\) Affected: 6.0\(2\)A8\(7a\) Affected: 6.0\(2\)A8\(7b\) Affected: 6.0\(2\)A8\(8\) Affected: 6.0\(2\)A8\(9\) Affected: 6.0\(2\)A8\(10a\) Affected: 6.0\(2\)A8\(10\) Affected: 6.0\(2\)A8\(11\) Affected: 6.0\(2\)A8\(11a\) Affected: 6.0\(2\)A8\(11b\) Affected: 6.0\(2\)U6\(1\) Affected: 6.0\(2\)U6\(2\) Affected: 6.0\(2\)U6\(3\) Affected: 6.0\(2\)U6\(4\) Affected: 6.0\(2\)U6\(5\) Affected: 6.0\(2\)U6\(6\) Affected: 6.0\(2\)U6\(7\) Affected: 6.0\(2\)U6\(8\) Affected: 6.0\(2\)U6\(1a\) Affected: 6.0\(2\)U6\(2a\) Affected: 6.0\(2\)U6\(3a\) Affected: 6.0\(2\)U6\(4a\) Affected: 6.0\(2\)U6\(5a\) Affected: 6.0\(2\)U6\(5b\) Affected: 6.0\(2\)U6\(5c\) Affected: 6.0\(2\)U6\(9\) Affected: 6.0\(2\)U6\(10\) Affected: 6.2\(2\) Affected: 6.2\(2a\) Affected: 6.2\(6\) Affected: 6.2\(6b\) Affected: 6.2\(8\) Affected: 6.2\(8a\) Affected: 6.2\(8b\) Affected: 6.2\(10\) Affected: 6.2\(12\) Affected: 6.2\(18\) Affected: 6.2\(16\) Affected: 6.2\(14\) Affected: 6.2\(6a\) Affected: 6.2\(20\) Affected: 6.2\(1\) Affected: 6.2\(5b\) Affected: 6.2\(9\) Affected: 6.2\(9a\) Affected: 6.2\(9b\) Affected: 6.2\(11\) Affected: 6.2\(13a\) Affected: 6.2\(13b\) Affected: 6.2\(17\) Affected: 6.2\(20a\) Affected: 6.2\(22\) Affected: 6.2\(27\) Affected: 6.2\(29\) Affected: 6.2\(24\) Affected: 6.2\(24a\) Affected: 6.2\(33\) Affected: 7.0\(3\)F1\(1\) Affected: 7.0\(3\)F2\(1\) Affected: 7.0\(3\)F2\(2\) Affected: 7.0\(3\)F3\(1\) Affected: 7.0\(3\)F3\(3\) Affected: 7.0\(3\)F3\(3a\) Affected: 7.0\(3\)F3\(4\) Affected: 7.0\(3\)F3\(3c\) Affected: 7.0\(3\)F3\(5\) Affected: 7.0\(3\)I4\(1\) Affected: 7.0\(3\)I4\(2\) Affected: 7.0\(3\)I4\(3\) Affected: 7.0\(3\)I4\(4\) Affected: 7.0\(3\)I4\(5\) Affected: 7.0\(3\)I4\(6\) Affected: 7.0\(3\)I4\(7\) Affected: 7.0\(3\)I4\(8\) Affected: 7.0\(3\)I4\(8a\) Affected: 7.0\(3\)I4\(8b\) Affected: 7.0\(3\)I4\(8z\) Affected: 7.0\(3\)I4\(9\) Affected: 7.0\(3\)I5\(1\) Affected: 7.0\(3\)I5\(2\) Affected: 7.0\(3\)I6\(1\) Affected: 7.0\(3\)I6\(2\) Affected: 7.0\(3\)I7\(1\) Affected: 7.0\(3\)I7\(2\) Affected: 7.0\(3\)I7\(3\) Affected: 7.0\(3\)I7\(4\) Affected: 7.0\(3\)I7\(5\) Affected: 7.0\(3\)I7\(5a\) Affected: 7.0\(3\)I7\(6\) Affected: 7.0\(3\)I7\(7\) Affected: 7.0\(3\)I7\(8\) Affected: 7.0\(3\)I7\(9\) Affected: 7.0\(3\)I7\(10\) Affected: 7.1\(0\)N1\(1a\) Affected: 7.1\(0\)N1\(1b\) Affected: 7.1\(0\)N1\(1\) Affected: 7.1\(1\)N1\(1\) Affected: 7.1\(2\)N1\(1\) Affected: 7.1\(3\)N1\(1\) Affected: 7.1\(3\)N1\(2\) Affected: 7.1\(4\)N1\(1\) Affected: 7.1\(5\)N1\(1\) Affected: 7.1\(5\)N1\(1b\) Affected: 7.2\(0\)D1\(1\) Affected: 7.2\(1\)D1\(1\) Affected: 7.2\(2\)D1\(2\) Affected: 7.2\(2\)D1\(1\) Affected: 7.3\(0\)D1\(1\) Affected: 7.3\(0\)DX\(1\) Affected: 7.3\(0\)N1\(1\) Affected: 7.3\(1\)D1\(1\) Affected: 7.3\(1\)N1\(1\) Affected: 7.3\(2\)D1\(1\) Affected: 7.3\(2\)D1\(2\) Affected: 7.3\(2\)D1\(3\) Affected: 7.3\(2\)D1\(3a\) Affected: 7.3\(2\)N1\(1\) Affected: 7.3\(3\)N1\(1\) Affected: 8.0\(1\) Affected: 8.1\(1\) Affected: 8.1\(2\) Affected: 8.1\(2a\) Affected: 8.1\(1b\) Affected: 8.2\(1\) Affected: 8.2\(2\) Affected: 8.2\(3\) Affected: 8.2\(4\) Affected: 8.2\(5\) Affected: 8.2\(6\) Affected: 8.2\(7\) Affected: 8.2\(7a\) Affected: 8.2\(8\) Affected: 8.2\(9\) Affected: 8.2\(10\) Affected: 8.2\(11\) Affected: 8.3\(1\) Affected: 8.3\(2\) Affected: 9.2\(1\) Affected: 9.2\(2\) Affected: 9.2\(2t\) Affected: 9.2\(3\) Affected: 9.2\(4\) Affected: 9.2\(2v\) Affected: 7.3\(4\)N1\(1\) Affected: 7.3\(3\)D1\(1\) Affected: 7.3\(4\)D1\(1\) Affected: 7.3\(5\)N1\(1\) Affected: 8.4\(1\) Affected: 8.4\(2\) Affected: 8.4\(3\) Affected: 8.4\(2b\) Affected: 8.4\(4\) Affected: 8.4\(2c\) Affected: 8.4\(4a\) Affected: 8.4\(5\) Affected: 8.4\(6\) Affected: 8.4\(6a\) Affected: 8.4\(7\) Affected: 8.4\(2f\) Affected: 8.4\(8\) Affected: 8.4\(9\) Affected: 9.3\(1\) Affected: 9.3\(2\) Affected: 9.3\(3\) Affected: 9.3\(4\) Affected: 9.3\(5\) Affected: 9.3\(6\) Affected: 9.3\(7\) Affected: 9.3\(7a\) Affected: 9.3\(8\) Affected: 9.3\(9\) Affected: 9.3\(10\) Affected: 9.3\(11\) Affected: 9.3\(2a\) Affected: 9.3\(12\) Affected: 9.3\(13\) Affected: 7.3\(6\)N1\(1\) Affected: 7.3\(5\)D1\(1\) Affected: 7.3\(7\)N1\(1\) Affected: 7.3\(7\)N1\(1a\) Affected: 7.3\(7\)N1\(1b\) Affected: 7.3\(6\)D1\(1\) Affected: 7.3\(8\)N1\(1\) Affected: 7.3\(7\)D1\(1\) Affected: 7.3\(9\)N1\(1\) Affected: 10.1\(1\) Affected: 8.5\(1\) Affected: 7.3\(10\)N1\(1\) Affected: 7.3\(8\)D1\(1\) Affected: 10.2\(1\) Affected: 10.2\(1q\) Affected: 10.2\(2\) Affected: 10.2\(3\) Affected: 10.2\(3t\) Affected: 7.3\(9\)D1\(1\) Affected: 7.3\(11\)N1\(1\) Affected: 7.3\(12\)N1\(1\) Affected: 10.3\(1\) Affected: 10.3\(3\) Affected: 10.3\(99w\) Affected: 10.3\(99x\) Affected: 10.3\(4a\) Affected: 10.3\(5\) Affected: 7.3\(13\)N1\(1\) Affected: 7.3\(14\)N1\(1\) Affected: 10.4\(1\) Affected: 10.4\(2\) cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(1\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(1a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(2\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(2a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(3\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(3a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(4\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(4a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(5a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(5b\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(6\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(7\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A6\(8\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(1\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(2\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(3\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(4\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(4a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(5\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(6\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(7\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(7a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(7b\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(8\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(9\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(10a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(10\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(11\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(11a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)A8\(11b\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(1\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(2\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(3\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(4\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(5\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(6\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(7\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(8\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(1a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(2a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(3a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(4a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(5a\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(5b\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(5c\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(9\):::::::* cpe:2.3:o:cisco:nx-os:6.0\(2\)U6\(10\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(2\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(2a\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(6\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(6b\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(8\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(8a\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(8b\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(10\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(12\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(18\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(16\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(14\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(6a\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(20\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(1\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(5b\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(9\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(9a\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(9b\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(11\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(13a\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(13b\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(17\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(20a\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(22\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(27\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(29\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(24\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(24a\):::::::* cpe:2.3:o:cisco:nx-os:6.2\(33\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F2\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F2\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F3\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F3\(3\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F3\(3a\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F3\(4\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F3\(3c\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)F3\(5\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(3\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(4\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(5\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(6\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(7\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(8\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(8a\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(8b\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(8z\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I4\(9\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I5\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I5\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I6\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I6\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(3\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(4\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(5\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(5a\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(6\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(7\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(8\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(9\):::::::* cpe:2.3:o:cisco:nx-os:7.0\(3\)I7\(10\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(0\)N1\(1a\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(0\)N1\(1b\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(0\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(1\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(2\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(3\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(3\)N1\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(4\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(5\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.1\(5\)N1\(1b\):::::::* cpe:2.3:o:cisco:nx-os:7.2\(0\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.2\(1\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.2\(2\)D1\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.2\(2\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(0\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(0\)DX\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(0\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(1\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(1\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(2\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(2\)D1\(2\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(2\)D1\(3\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(2\)D1\(3a\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(2\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(3\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.0\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.1\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.1\(2\):::::::* cpe:2.3:o:cisco:nx-os:8.1\(2a\):::::::* cpe:2.3:o:cisco:nx-os:8.1\(1b\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(2\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(3\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(4\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(5\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(6\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(7\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(7a\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(8\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(9\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(10\):::::::* cpe:2.3:o:cisco:nx-os:8.2\(11\):::::::* cpe:2.3:o:cisco:nx-os:8.3\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.3\(2\):::::::* cpe:2.3:o:cisco:nx-os:9.2\(1\):::::::* cpe:2.3:o:cisco:nx-os:9.2\(2\):::::::* cpe:2.3:o:cisco:nx-os:9.2\(2t\):::::::* cpe:2.3:o:cisco:nx-os:9.2\(3\):::::::* cpe:2.3:o:cisco:nx-os:9.2\(4\):::::::* cpe:2.3:o:cisco:nx-os:9.2\(2v\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(4\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(3\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(4\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(5\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(2\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(3\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(2b\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(4\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(2c\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(4a\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(5\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(6\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(6a\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(7\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(2f\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(8\):::::::* cpe:2.3:o:cisco:nx-os:8.4\(9\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(1\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(2\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(3\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(4\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(5\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(6\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(7\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(7a\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(8\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(9\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(10\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(11\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(2a\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(12\):::::::* cpe:2.3:o:cisco:nx-os:9.3\(13\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(6\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(5\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(7\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(7\)N1\(1a\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(7\)N1\(1b\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(6\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(8\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(7\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(9\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:10.1\(1\):::::::* cpe:2.3:o:cisco:nx-os:8.5\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(10\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(8\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:10.2\(1\):::::::* cpe:2.3:o:cisco:nx-os:10.2\(1q\):::::::* cpe:2.3:o:cisco:nx-os:10.2\(2\):::::::* cpe:2.3:o:cisco:nx-os:10.2\(3\):::::::* cpe:2.3:o:cisco:nx-os:10.2\(3t\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(9\)D1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(11\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(12\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:10.3\(1\):::::::* cpe:2.3:o:cisco:nx-os:10.3\(3\):::::::* cpe:2.3:o:cisco:nx-os:10.3\(99w\):::::::* cpe:2.3:o:cisco:nx-os:10.3\(99x\):::::::* cpe:2.3:o:cisco:nx-os:10.3\(4a\):::::::* cpe:2.3:o:cisco:nx-os:10.3\(5\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(13\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:7.3\(14\)N1\(1\):::::::* cpe:2.3:o:cisco:nx-os:10.4\(1\):::::::* cpe:2.3:o:cisco:nx-os:10.4\(2\):::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(1a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(2a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(3a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(4a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(5a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(5b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A6\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(4a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(7a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(7b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(10a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(10\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(11\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(11a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)A8\\(11b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(1a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(2a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(3a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(4a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(5a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(5b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(5c\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)U6\\(10\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(2a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(6b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(8a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(8b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(10\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(12\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(18\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(16\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(14\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(6a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(20\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(5b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(9a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(9b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(11\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(13a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(13b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(17\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(20a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(22\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(27\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(29\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(24\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(24a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:6.2\\(33\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F2\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F2\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F3\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F3\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F3\\(3a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F3\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F3\\(3c\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)F3\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(8a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(8b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(8z\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I4\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I5\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I5\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I6\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I6\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(5a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)I7\\(10\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)N1\\(1a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)N1\\(1b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)N1\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(5\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.1\\(5\\)N1\\(1b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.2\\(2\\)D1\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.2\\(2\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)DX\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)D1\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)D1\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)D1\\(3a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(3\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.0\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.1\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.1\\(2a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.1\\(1b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(7a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(10\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.2\\(11\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.3\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.3\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.2\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.2\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.2\\(2t\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.2\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.2\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.2\\(2v\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(4\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(3\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(4\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(5\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(2b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(2c\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(4a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(6a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(2f\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.4\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(4\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(6\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(7\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(7a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(8\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(9\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(10\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(11\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(2a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(12\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:9.3\\(13\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(6\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(5\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)N1\\(1a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)N1\\(1b\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(6\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(8\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(9\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:8.5\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(10\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(8\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.2\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.2\\(1q\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.2\\(2\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.2\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.2\\(3t\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(9\\)D1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(11\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(12\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.3\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.3\\(3\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.3\\(99w\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.3\\(99x\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.3\\(4a\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.3\\(5\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(13\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:7.3\\(14\\)N1\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.4\\(1\\):*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:nx-os:10.4\\(2\\):*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "nx-os",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "6.0\\(2\\)a6\\(1\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(1a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(2\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(2a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(3\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(3a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(4\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(4a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(5a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(5b\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(6\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(7\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A6\\(8\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(1\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(2\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(3\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(4\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(4a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(5\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(6\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(7\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(7a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(7b\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(8\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(9\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(10a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(10\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(11\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(11a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)A8\\(11b\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(1\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(2\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(3\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(4\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(5\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(6\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(7\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(8\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(1a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(2a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(3a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(4a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(5a\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(5b\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(5c\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(9\\)"
              },
              {
                "status": "affected",
                "version": "6.0\\(2\\)U6\\(10\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(2\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(2a\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(6\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(6b\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(8\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(8a\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(8b\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(10\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(12\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(18\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(16\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(14\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(6a\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(20\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(1\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(5b\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(9\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(9a\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(9b\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(11\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(13a\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(13b\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(17\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(20a\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(22\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(27\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(29\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(24\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(24a\\)"
              },
              {
                "status": "affected",
                "version": "6.2\\(33\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F2\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F2\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F3\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F3\\(3\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F3\\(3a\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F3\\(4\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F3\\(3c\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)F3\\(5\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(3\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(4\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(5\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(6\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(7\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(8\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(8a\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(8b\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(8z\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I4\\(9\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I5\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I5\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I6\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I6\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(3\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(4\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(5\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(5a\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(6\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(7\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(8\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(9\\)"
              },
              {
                "status": "affected",
                "version": "7.0\\(3\\)I7\\(10\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(0\\)N1\\(1a\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(0\\)N1\\(1b\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(0\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(1\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(2\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(3\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(3\\)N1\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(4\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(5\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.1\\(5\\)N1\\(1b\\)"
              },
              {
                "status": "affected",
                "version": "7.2\\(0\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.2\\(1\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.2\\(2\\)D1\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.2\\(2\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(0\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(0\\)DX\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(0\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(1\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(1\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(2\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(2\\)D1\\(2\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(2\\)D1\\(3\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(2\\)D1\\(3a\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(2\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(3\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.0\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.1\\(2\\)"
              },
              {
                "status": "affected",
                "version": "8.1\\(2a\\)"
              },
              {
                "status": "affected",
                "version": "8.1\\(1b\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(2\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(3\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(4\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(5\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(6\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(7\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(7a\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(8\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(9\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(10\\)"
              },
              {
                "status": "affected",
                "version": "8.2\\(11\\)"
              },
              {
                "status": "affected",
                "version": "8.3\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.3\\(2\\)"
              },
              {
                "status": "affected",
                "version": "9.2\\(1\\)"
              },
              {
                "status": "affected",
                "version": "9.2\\(2\\)"
              },
              {
                "status": "affected",
                "version": "9.2\\(2t\\)"
              },
              {
                "status": "affected",
                "version": "9.2\\(3\\)"
              },
              {
                "status": "affected",
                "version": "9.2\\(4\\)"
              },
              {
                "status": "affected",
                "version": "9.2\\(2v\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(4\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(3\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(4\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(5\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(2\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(3\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(2b\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(4\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(2c\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(4a\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(5\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(6\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(6a\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(7\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(2f\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(8\\)"
              },
              {
                "status": "affected",
                "version": "8.4\\(9\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(1\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(2\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(3\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(4\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(5\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(6\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(7\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(7a\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(8\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(9\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(10\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(11\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(2a\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(12\\)"
              },
              {
                "status": "affected",
                "version": "9.3\\(13\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(6\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(5\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(7\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(7\\)N1\\(1a\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(7\\)N1\\(1b\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(6\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(8\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(7\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(9\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "10.1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "8.5\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(10\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(8\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "10.2\\(1\\)"
              },
              {
                "status": "affected",
                "version": "10.2\\(1q\\)"
              },
              {
                "status": "affected",
                "version": "10.2\\(2\\)"
              },
              {
                "status": "affected",
                "version": "10.2\\(3\\)"
              },
              {
                "status": "affected",
                "version": "10.2\\(3t\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(9\\)D1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(11\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(12\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "10.3\\(1\\)"
              },
              {
                "status": "affected",
                "version": "10.3\\(3\\)"
              },
              {
                "status": "affected",
                "version": "10.3\\(99w\\)"
              },
              {
                "status": "affected",
                "version": "10.3\\(99x\\)"
              },
              {
                "status": "affected",
                "version": "10.3\\(4a\\)"
              },
              {
                "status": "affected",
                "version": "10.3\\(5\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(13\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "7.3\\(14\\)N1\\(1\\)"
              },
              {
                "status": "affected",
                "version": "10.4\\(1\\)"
              },
              {
                "status": "affected",
                "version": "10.4\\(2\\)"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20399",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-02T15:08:04.278010Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-07-02",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20399"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T18:43:58.429Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "name": "CISA KEV",
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20399"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-07-02T00:00:00.000Z",
            "value": "CVE-2024-20399 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:42.407Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-nxos-cmd-injection-xD9OhyOP",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.sygnia.co/threat-reports-and-advisories/china-nexus-threat-group-velvet-ant-exploits-cisco-0-day/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco NX-OS Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "8.2(5)"
            },
            {
              "status": "affected",
              "version": "7.3(6)N1(1a)"
            },
            {
              "status": "affected",
              "version": "7.3(5)D1(1)"
            },
            {
              "status": "affected",
              "version": "8.4(2)"
            },
            {
              "status": "affected",
              "version": "7.3(6)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(2)"
            },
            {
              "status": "affected",
              "version": "8.4(3)"
            },
            {
              "status": "affected",
              "version": "9.2(3)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I5(2)"
            },
            {
              "status": "affected",
              "version": "8.2(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(7a)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(5)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(1)"
            },
            {
              "status": "affected",
              "version": "7.3(1)D1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(14a)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(6)"
            },
            {
              "status": "affected",
              "version": "7.3(4)N1(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(3)"
            },
            {
              "status": "affected",
              "version": "9.2(2v)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(5b)"
            },
            {
              "status": "affected",
              "version": "7.3(0)D1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(17a)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(7)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(1a)"
            },
            {
              "status": "affected",
              "version": "7.1(5)N1(1b)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(8)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(2)"
            },
            {
              "status": "affected",
              "version": "7.1(4)N1(1c)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IM3(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(5a)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(11)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(4a)"
            },
            {
              "status": "affected",
              "version": "6.2(9)"
            },
            {
              "status": "affected",
              "version": "6.2(5)"
            },
            {
              "status": "affected",
              "version": "7.3(4)D1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(20)"
            },
            {
              "status": "affected",
              "version": "9.2(1)"
            },
            {
              "status": "affected",
              "version": "9.2(2t)"
            },
            {
              "status": "affected",
              "version": "9.2(3y)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(1t)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(5c)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(4)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(6z)"
            },
            {
              "status": "affected",
              "version": "9.3(2)"
            },
            {
              "status": "affected",
              "version": "7.3(1)DY(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F3(3)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(6)"
            },
            {
              "status": "affected",
              "version": "6.2(29)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(3z)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IM7(2)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(11b)"
            },
            {
              "status": "affected",
              "version": "6.2(9a)"
            },
            {
              "status": "affected",
              "version": "7.3(0)N1(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(5a)"
            },
            {
              "status": "affected",
              "version": "6.2(11d)"
            },
            {
              "status": "affected",
              "version": "8.1(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I6(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(10)"
            },
            {
              "status": "affected",
              "version": "7.2(2)D1(2)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IM3(2)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(8)"
            },
            {
              "status": "affected",
              "version": "8.2(2)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(1)"
            },
            {
              "status": "affected",
              "version": "7.3(2)N1(1c)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I5(3b)"
            },
            {
              "status": "affected",
              "version": "8.3(2)"
            },
            {
              "status": "affected",
              "version": "7.3(5)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(2a)"
            },
            {
              "status": "affected",
              "version": "7.3(2)N1(1b)"
            },
            {
              "status": "affected",
              "version": "6.2(27)"
            },
            {
              "status": "affected",
              "version": "7.3(2)D1(3a)"
            },
            {
              "status": "affected",
              "version": "7.3(1)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(7)"
            },
            {
              "status": "affected",
              "version": "9.2(4)"
            },
            {
              "status": "affected",
              "version": "7.1(4)N1(1a)"
            },
            {
              "status": "affected",
              "version": "7.1(3)N1(4)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IM3(2a)"
            },
            {
              "status": "affected",
              "version": "6.2(8b)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(10)"
            },
            {
              "status": "affected",
              "version": "7.1(3)N1(2)"
            },
            {
              "status": "affected",
              "version": "6.2(13)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(2)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IC4(4)"
            },
            {
              "status": "affected",
              "version": "6.2(1)"
            },
            {
              "status": "affected",
              "version": "7.3(4)N1(1a)"
            },
            {
              "status": "affected",
              "version": "8.1(2)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(3)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(5b)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F3(3c)"
            },
            {
              "status": "affected",
              "version": "7.3(3)D1(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F3(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(5)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F3(5)"
            },
            {
              "status": "affected",
              "version": "7.1(2)N1(1)"
            },
            {
              "status": "affected",
              "version": "7.1(3)N1(3)"
            },
            {
              "status": "affected",
              "version": "8.2(3)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(7)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(2)"
            },
            {
              "status": "affected",
              "version": "6.2(5a)"
            },
            {
              "status": "affected",
              "version": "6.2(18)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(5)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IM3(2b)"
            },
            {
              "status": "affected",
              "version": "7.1(3)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(4a)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I5(3)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(3)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(6)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I6(2)"
            },
            {
              "status": "affected",
              "version": "8.3(1)"
            },
            {
              "status": "affected",
              "version": "6.2(3)"
            },
            {
              "status": "affected",
              "version": "6.2(22)"
            },
            {
              "status": "affected",
              "version": "7.1(1)N1(1)"
            },
            {
              "status": "affected",
              "version": "8.4(1)"
            },
            {
              "status": "affected",
              "version": "8.1(1b)"
            },
            {
              "status": "affected",
              "version": "7.3(0)N1(1b)"
            },
            {
              "status": "affected",
              "version": "7.2(2)D1(4)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(5)"
            },
            {
              "status": "affected",
              "version": "7.3(0)DX(1)"
            },
            {
              "status": "affected",
              "version": "7.1(4)N1(1d)"
            },
            {
              "status": "affected",
              "version": "7.3(2)D1(1)"
            },
            {
              "status": "affected",
              "version": "7.3(2)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(8)"
            },
            {
              "status": "affected",
              "version": "7.1(1)N1(1a)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IM3(3)"
            },
            {
              "status": "affected",
              "version": "9.3(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(2)"
            },
            {
              "status": "affected",
              "version": "6.2(9b)"
            },
            {
              "status": "affected",
              "version": "7.1(3)N1(2a)"
            },
            {
              "status": "affected",
              "version": "7.3(0)N1(1a)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(7)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(6)"
            },
            {
              "status": "affected",
              "version": "7.3(2)D1(2)"
            },
            {
              "status": "affected",
              "version": "6.2(25)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(3a)"
            },
            {
              "status": "affected",
              "version": "8.0(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(11a)"
            },
            {
              "status": "affected",
              "version": "6.2(11e)"
            },
            {
              "status": "affected",
              "version": "7.1(3)N1(5)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(8z)"
            },
            {
              "status": "affected",
              "version": "6.2(11)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(9)"
            },
            {
              "status": "affected",
              "version": "6.2(16)"
            },
            {
              "status": "affected",
              "version": "6.2(19)"
            },
            {
              "status": "affected",
              "version": "8.2(4)"
            },
            {
              "status": "affected",
              "version": "6.2(2a)"
            },
            {
              "status": "affected",
              "version": "7.2(2)D1(3)"
            },
            {
              "status": "affected",
              "version": "7.1(0)N1(1b)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(4)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(7)"
            },
            {
              "status": "affected",
              "version": "6.2(5b)"
            },
            {
              "status": "affected",
              "version": "7.3(0)DY(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(9)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(1)"
            },
            {
              "status": "affected",
              "version": "7.1(5)N1(1)"
            },
            {
              "status": "affected",
              "version": "7.2(1)D1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(15)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(6)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(10a)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I5(1)"
            },
            {
              "status": "affected",
              "version": "9.3(1z)"
            },
            {
              "status": "affected",
              "version": "9.2(2)"
            },
            {
              "status": "affected",
              "version": "6.2(7)"
            },
            {
              "status": "affected",
              "version": "6.2(9c)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F3(4)"
            },
            {
              "status": "affected",
              "version": "7.3(3)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(6b)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(8b)"
            },
            {
              "status": "affected",
              "version": "8.1(2a)"
            },
            {
              "status": "affected",
              "version": "7.3(2)D1(3)"
            },
            {
              "status": "affected",
              "version": "6.2(8)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(3)"
            },
            {
              "status": "affected",
              "version": "6.2(11b)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(6t)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I5(3a)"
            },
            {
              "status": "affected",
              "version": "8.1(1a)"
            },
            {
              "status": "affected",
              "version": "6.2(13a)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(8)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(5)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F3(3a)"
            },
            {
              "status": "affected",
              "version": "7.1(0)N1(1a)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(4)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(3a)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(5a)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F2(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(8a)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(9)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F3(2)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(2a)"
            },
            {
              "status": "affected",
              "version": "6.2(12)"
            },
            {
              "status": "affected",
              "version": "6.2(17)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I4(4)"
            },
            {
              "status": "affected",
              "version": "6.2(23)"
            },
            {
              "status": "affected",
              "version": "6.2(13b)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(3)"
            },
            {
              "status": "affected",
              "version": "6.2(10)"
            },
            {
              "status": "affected",
              "version": "6.2(6a)"
            },
            {
              "status": "affected",
              "version": "6.2(6)"
            },
            {
              "status": "affected",
              "version": "7.1(2)N1(1a)"
            },
            {
              "status": "affected",
              "version": "6.2(14)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(1)"
            },
            {
              "status": "affected",
              "version": "6.2(14b)"
            },
            {
              "status": "affected",
              "version": "6.2(21)"
            },
            {
              "status": "affected",
              "version": "7.2(2)D1(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F2(2)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IA7(2)"
            },
            {
              "status": "affected",
              "version": "7.0(3)IA7(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(7b)"
            },
            {
              "status": "affected",
              "version": "6.2(8a)"
            },
            {
              "status": "affected",
              "version": "6.2(11c)"
            },
            {
              "status": "affected",
              "version": "7.0(3)F1(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(1a)"
            },
            {
              "status": "affected",
              "version": "7.1(0)N1(1)"
            },
            {
              "status": "affected",
              "version": "7.2(0)D1(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A6(2)"
            },
            {
              "status": "affected",
              "version": "7.1(4)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.0(2)A8(4a)"
            },
            {
              "status": "affected",
              "version": "6.2(20a)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(4)"
            },
            {
              "status": "affected",
              "version": "8.4(1a)"
            },
            {
              "status": "affected",
              "version": "9.3(3)"
            },
            {
              "status": "affected",
              "version": "7.3(2)D1(1d)"
            },
            {
              "status": "affected",
              "version": "7.3(7)N1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(24)"
            },
            {
              "status": "affected",
              "version": "6.2(31)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(8)"
            },
            {
              "status": "affected",
              "version": "6.0(2)U6(10a)"
            },
            {
              "status": "affected",
              "version": "7.3(7)N1(1a)"
            },
            {
              "status": "affected",
              "version": "9.3(4)"
            },
            {
              "status": "affected",
              "version": "7.3(6)D1(1)"
            },
            {
              "status": "affected",
              "version": "6.2(26)"
            },
            {
              "status": "affected",
              "version": "8.2(6)"
            },
            {
              "status": "affected",
              "version": "6.2(33)"
            },
            {
              "status": "affected",
              "version": "9.3(5)"
            },
            {
              "status": "affected",
              "version": "8.4(2a)"
            },
            {
              "status": "affected",
              "version": "8.4(2b)"
            },
            {
              "status": "affected",
              "version": "7.3(8)N1(1)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(9)"
            },
            {
              "status": "affected",
              "version": "7.3(7)N1(1b)"
            },
            {
              "status": "affected",
              "version": "6.2(24a)"
            },
            {
              "status": "affected",
              "version": "8.5(1)"
            },
            {
              "status": "affected",
              "version": "9.3(6)"
            },
            {
              "status": "affected",
              "version": "10.1(2)"
            },
            {
              "status": "affected",
              "version": "10.1(1)"
            },
            {
              "status": "affected",
              "version": "8.4(4)"
            },
            {
              "status": "affected",
              "version": "7.3(7)D1(1)"
            },
            {
              "status": "affected",
              "version": "8.4(2c)"
            },
            {
              "status": "affected",
              "version": "9.3(5w)"
            },
            {
              "status": "affected",
              "version": "8.2(7)"
            },
            {
              "status": "affected",
              "version": "7.3(9)N1(1)"
            },
            {
              "status": "affected",
              "version": "9.3(7)"
            },
            {
              "status": "affected",
              "version": "9.3(7k)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(9w)"
            },
            {
              "status": "affected",
              "version": "10.2(1)"
            },
            {
              "status": "affected",
              "version": "7.3(8)N1(1a)"
            },
            {
              "status": "affected",
              "version": "7.3(8)D1(1)"
            },
            {
              "status": "affected",
              "version": "9.3(7a)"
            },
            {
              "status": "affected",
              "version": "8.2(7a)"
            },
            {
              "status": "affected",
              "version": "9.3(8)"
            },
            {
              "status": "affected",
              "version": "8.4(4a)"
            },
            {
              "status": "affected",
              "version": "8.4(2d)"
            },
            {
              "status": "affected",
              "version": "7.3(10)N1(1)"
            },
            {
              "status": "affected",
              "version": "8.4(5)"
            },
            {
              "status": "affected",
              "version": "7.0(3)I7(10)"
            },
            {
              "status": "affected",
              "version": "7.3(8)N1(1b)"
            },
            {
              "status": "affected",
              "version": "8.2(8)"
            },
            {
              "status": "affected",
              "version": "10.2(1q)"
            },
            {
              "status": "affected",
              "version": "10.2(2)"
            },
            {
              "status": "affected",
              "version": "9.3(9)"
            },
            {
              "status": "affected",
              "version": "7.3(9)D1(1)"
            },
            {
              "status": "affected",
              "version": "7.3(11)N1(1)"
            },
            {
              "status": "affected",
              "version": "10.2(3)"
            },
            {
              "status": "affected",
              "version": "8.4(6)"
            },
            {
              "status": "affected",
              "version": "8.4(2e)"
            },
            {
              "status": "affected",
              "version": "9.3(10)"
            },
            {
              "status": "affected",
              "version": "7.3(11)N1(1a)"
            },
            {
              "status": "affected",
              "version": "10.2(2a)"
            },
            {
              "status": "affected",
              "version": "7.3(12)N1(1)"
            },
            {
              "status": "affected",
              "version": "9.2(1a)"
            },
            {
              "status": "affected",
              "version": "8.2(9)"
            },
            {
              "status": "affected",
              "version": "10.3(1)"
            },
            {
              "status": "affected",
              "version": "10.2(4)"
            },
            {
              "status": "affected",
              "version": "7.3(13)N1(1)"
            },
            {
              "status": "affected",
              "version": "8.4(7)"
            },
            {
              "status": "affected",
              "version": "10.3(2)"
            },
            {
              "status": "affected",
              "version": "8.4(6a)"
            },
            {
              "status": "affected",
              "version": "9.3(11)"
            },
            {
              "status": "affected",
              "version": "10.3(3)"
            },
            {
              "status": "affected",
              "version": "10.2(5)"
            },
            {
              "status": "affected",
              "version": "9.4(1)"
            },
            {
              "status": "affected",
              "version": "9.3(2a)"
            },
            {
              "status": "affected",
              "version": "8.4(2f)"
            },
            {
              "status": "affected",
              "version": "8.2(10)"
            },
            {
              "status": "affected",
              "version": "9.3(12)"
            },
            {
              "status": "affected",
              "version": "10.4(1)"
            },
            {
              "status": "affected",
              "version": "8.4(8)"
            },
            {
              "status": "affected",
              "version": "10.3(99w)"
            },
            {
              "status": "affected",
              "version": "7.3(14)N1(1)"
            },
            {
              "status": "affected",
              "version": "10.2(6)"
            },
            {
              "status": "affected",
              "version": "10.3(3w)"
            },
            {
              "status": "affected",
              "version": "10.3(99x)"
            },
            {
              "status": "affected",
              "version": "10.3(3o)"
            },
            {
              "status": "affected",
              "version": "8.4(9)"
            },
            {
              "status": "affected",
              "version": "10.3(4)"
            },
            {
              "status": "affected",
              "version": "10.3(3p)"
            },
            {
              "status": "affected",
              "version": "10.3(4a)"
            },
            {
              "status": "affected",
              "version": "9.4(1a)"
            },
            {
              "status": "affected",
              "version": "10.4(2)"
            },
            {
              "status": "affected",
              "version": "10.3(3q)"
            },
            {
              "status": "affected",
              "version": "9.3(13)"
            },
            {
              "status": "affected",
              "version": "8.2(11)"
            },
            {
              "status": "affected",
              "version": "9.4(2)"
            },
            {
              "status": "affected",
              "version": "10.3(5)"
            },
            {
              "status": "affected",
              "version": "10.2(7)"
            },
            {
              "status": "affected",
              "version": "10.3(3x)"
            },
            {
              "status": "affected",
              "version": "10.3(4g)"
            },
            {
              "status": "affected",
              "version": "10.2(8)"
            },
            {
              "status": "affected",
              "version": "10.3(3r)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode"
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "In May 2024, the Cisco Product Security Incident Response Team (PSIRT) became aware of attempted exploitation of this vulnerability in the wild."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-17T18:07:44.853Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-nxos-cmd-injection-xD9OhyOP",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP"
        }
      ],
      "source": {
        "advisory": "cisco-sa-nxos-cmd-injection-xD9OhyOP",
        "defects": [
          "CSCwj94682"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco NX-OS Software CLI Command Injection Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20399",
    "datePublished": "2024-07-01T16:11:44.028Z",
    "dateReserved": "2023-11-08T15:08:07.660Z",
    "dateUpdated": "2025-10-21T18:43:58.429Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20398 (GCVE-0-2024-20398)

Vulnerability from cvelistv5 – Published: 2024-09-11 16:38 – Updated: 2024-09-12 03:55

Title

Cisco IOS XR Software Local Privilege Escalation Vulnerability

Summary

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the prompt. A successful exploit could allow the attacker to elevate privileges to root.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco IOS XR Software	Affected: 6.5.3 Affected: 6.5.29 Affected: 6.5.1 Affected: 6.6.1 Affected: 6.5.2 Affected: 6.5.92 Affected: 6.5.15 Affected: 6.6.2 Affected: 7.0.1 Affected: 6.6.25 Affected: 6.5.26 Affected: 6.6.11 Affected: 6.5.25 Affected: 6.5.28 Affected: 6.5.93 Affected: 6.6.12 Affected: 6.5.90 Affected: 7.0.0 Affected: 7.1.1 Affected: 7.0.90 Affected: 6.6.3 Affected: 7.0.2 Affected: 7.1.15 Affected: 7.2.0 Affected: 7.2.1 Affected: 7.1.2 Affected: 7.0.11 Affected: 7.0.12 Affected: 7.0.14 Affected: 7.1.25 Affected: 6.6.4 Affected: 7.2.12 Affected: 7.3.1 Affected: 7.1.3 Affected: 7.4.1 Affected: 7.2.2 Affected: 6.5.31 Affected: 7.3.15 Affected: 7.3.16 Affected: 7.4.15 Affected: 6.5.32 Affected: 7.3.2 Affected: 7.5.1 Affected: 7.4.16 Affected: 7.3.27 Affected: 7.6.1 Affected: 7.5.2 Affected: 7.8.1 Affected: 7.6.15 Affected: 7.5.12 Affected: 7.8.12 Affected: 7.3.3 Affected: 7.7.1 Affected: 7.3.4 Affected: 7.4.2 Affected: 7.6.2 Affected: 7.5.3 Affected: 7.7.2 Affected: 7.9.1 Affected: 7.10.1 Affected: 7.8.2 Affected: 7.5.4 Affected: 6.5.33 Affected: 7.8.22 Affected: 7.7.21 Affected: 7.9.2 Affected: 7.3.5 Affected: 7.5.5 Affected: 7.11.1 Affected: 7.9.21 Affected: 7.10.2 Affected: 24.1.1 Affected: 7.6.3 Affected: 7.3.6 Affected: 7.5.52 Affected: 7.11.2
cisco	ios_xr_software	Affected: 6.5.3 , ≤ 7.11.2 (custom) cpe:2.3:o:cisco:ios_xr_software:-:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:cisco:ios_xr_software:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ios_xr_software",
            "vendor": "cisco",
            "versions": [
              {
                "lessThanOrEqual": "7.11.2",
                "status": "affected",
                "version": "6.5.3",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20398",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-11T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T03:55:39.920Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco IOS XR Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "6.5.3"
            },
            {
              "status": "affected",
              "version": "6.5.29"
            },
            {
              "status": "affected",
              "version": "6.5.1"
            },
            {
              "status": "affected",
              "version": "6.6.1"
            },
            {
              "status": "affected",
              "version": "6.5.2"
            },
            {
              "status": "affected",
              "version": "6.5.92"
            },
            {
              "status": "affected",
              "version": "6.5.15"
            },
            {
              "status": "affected",
              "version": "6.6.2"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "6.6.25"
            },
            {
              "status": "affected",
              "version": "6.5.26"
            },
            {
              "status": "affected",
              "version": "6.6.11"
            },
            {
              "status": "affected",
              "version": "6.5.25"
            },
            {
              "status": "affected",
              "version": "6.5.28"
            },
            {
              "status": "affected",
              "version": "6.5.93"
            },
            {
              "status": "affected",
              "version": "6.6.12"
            },
            {
              "status": "affected",
              "version": "6.5.90"
            },
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.90"
            },
            {
              "status": "affected",
              "version": "6.6.3"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.15"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.2.1"
            },
            {
              "status": "affected",
              "version": "7.1.2"
            },
            {
              "status": "affected",
              "version": "7.0.11"
            },
            {
              "status": "affected",
              "version": "7.0.12"
            },
            {
              "status": "affected",
              "version": "7.0.14"
            },
            {
              "status": "affected",
              "version": "7.1.25"
            },
            {
              "status": "affected",
              "version": "6.6.4"
            },
            {
              "status": "affected",
              "version": "7.2.12"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "7.1.3"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "6.5.31"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.3.16"
            },
            {
              "status": "affected",
              "version": "7.4.15"
            },
            {
              "status": "affected",
              "version": "6.5.32"
            },
            {
              "status": "affected",
              "version": "7.3.2"
            },
            {
              "status": "affected",
              "version": "7.5.1"
            },
            {
              "status": "affected",
              "version": "7.4.16"
            },
            {
              "status": "affected",
              "version": "7.3.27"
            },
            {
              "status": "affected",
              "version": "7.6.1"
            },
            {
              "status": "affected",
              "version": "7.5.2"
            },
            {
              "status": "affected",
              "version": "7.8.1"
            },
            {
              "status": "affected",
              "version": "7.6.15"
            },
            {
              "status": "affected",
              "version": "7.5.12"
            },
            {
              "status": "affected",
              "version": "7.8.12"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.7.1"
            },
            {
              "status": "affected",
              "version": "7.3.4"
            },
            {
              "status": "affected",
              "version": "7.4.2"
            },
            {
              "status": "affected",
              "version": "7.6.2"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.7.2"
            },
            {
              "status": "affected",
              "version": "7.9.1"
            },
            {
              "status": "affected",
              "version": "7.10.1"
            },
            {
              "status": "affected",
              "version": "7.8.2"
            },
            {
              "status": "affected",
              "version": "7.5.4"
            },
            {
              "status": "affected",
              "version": "6.5.33"
            },
            {
              "status": "affected",
              "version": "7.8.22"
            },
            {
              "status": "affected",
              "version": "7.7.21"
            },
            {
              "status": "affected",
              "version": "7.9.2"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "7.11.1"
            },
            {
              "status": "affected",
              "version": "7.9.21"
            },
            {
              "status": "affected",
              "version": "7.10.2"
            },
            {
              "status": "affected",
              "version": "24.1.1"
            },
            {
              "status": "affected",
              "version": "7.6.3"
            },
            {
              "status": "affected",
              "version": "7.3.6"
            },
            {
              "status": "affected",
              "version": "7.5.52"
            },
            {
              "status": "affected",
              "version": "7.11.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the prompt. A successful exploit could allow the attacker to elevate privileges to root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-11T16:38:23.982Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-iosxr-priv-esc-CrG5vhCq",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-priv-esc-CrG5vhCq"
        }
      ],
      "source": {
        "advisory": "cisco-sa-iosxr-priv-esc-CrG5vhCq",
        "defects": [
          "CSCwj25248"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco IOS XR Software Local Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20398",
    "datePublished": "2024-09-11T16:38:23.982Z",
    "dateReserved": "2023-11-08T15:08:07.660Z",
    "dateUpdated": "2024-09-12T03:55:39.920Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20358 (GCVE-0-2024-20358)

Vulnerability from cvelistv5 – Published: 2024-04-24 19:38 – Updated: 2026-03-04 17:23

Summary

A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. This vulnerability exists because the contents of a backup file are improperly sanitized at restore time. An attacker could exploit this vulnerability by restoring a crafted backup file to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system as root.

Severity

6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

3 products

Vendor	Product	Version
Cisco	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software	Affected: 9.8.1 Affected: 9.8.1.5 Affected: 9.8.1.7 Affected: 9.8.2 Affected: 9.8.2.8 Affected: 9.8.2.14 Affected: 9.8.2.15 Affected: 9.8.2.17 Affected: 9.8.2.20 Affected: 9.8.2.24 Affected: 9.8.2.26 Affected: 9.8.2.28 Affected: 9.8.2.33 Affected: 9.8.2.35 Affected: 9.8.2.38 Affected: 9.8.3.8 Affected: 9.8.3.11 Affected: 9.8.3.14 Affected: 9.8.3.16 Affected: 9.8.3.18 Affected: 9.8.3.21 Affected: 9.8.3 Affected: 9.8.3.26 Affected: 9.8.3.29 Affected: 9.8.4 Affected: 9.8.4.3 Affected: 9.8.4.7 Affected: 9.8.4.8 Affected: 9.8.4.10 Affected: 9.8.4.12 Affected: 9.8.4.15 Affected: 9.8.4.17 Affected: 9.8.2.45 Affected: 9.8.4.25 Affected: 9.8.4.20 Affected: 9.8.4.22 Affected: 9.8.4.26 Affected: 9.8.4.29 Affected: 9.8.4.32 Affected: 9.8.4.34 Affected: 9.8.4.35 Affected: 9.8.4.39 Affected: 9.8.4.40 Affected: 9.8.4.41 Affected: 9.8.4.43 Affected: 9.8.4.44 Affected: 9.8.4.45 Affected: 9.8.4.46 Affected: 9.8.4.48 Affected: 9.12.1 Affected: 9.12.1.2 Affected: 9.12.1.3 Affected: 9.12.2 Affected: 9.12.2.4 Affected: 9.12.2.5 Affected: 9.12.2.9 Affected: 9.12.3 Affected: 9.12.3.2 Affected: 9.12.3.7 Affected: 9.12.4 Affected: 9.12.3.12 Affected: 9.12.3.9 Affected: 9.12.2.1 Affected: 9.12.4.2 Affected: 9.12.4.4 Affected: 9.12.4.7 Affected: 9.12.4.10 Affected: 9.12.4.13 Affected: 9.12.4.8 Affected: 9.12.4.18 Affected: 9.12.4.24 Affected: 9.12.4.26 Affected: 9.12.4.29 Affected: 9.12.4.30 Affected: 9.12.4.35 Affected: 9.12.4.37 Affected: 9.12.4.38 Affected: 9.12.4.39 Affected: 9.12.4.40 Affected: 9.12.4.41 Affected: 9.12.4.47 Affected: 9.12.4.48 Affected: 9.12.4.50 Affected: 9.12.4.52 Affected: 9.12.4.54 Affected: 9.12.4.55 Affected: 9.12.4.56 Affected: 9.12.4.58 Affected: 9.12.4.62 Affected: 9.12.4.65 Affected: 9.12.4.67 Affected: 9.14.1 Affected: 9.14.1.10 Affected: 9.14.1.6 Affected: 9.14.1.15 Affected: 9.14.1.19 Affected: 9.14.1.30 Affected: 9.14.2 Affected: 9.14.2.4 Affected: 9.14.2.8 Affected: 9.14.2.13 Affected: 9.14.2.15 Affected: 9.14.3 Affected: 9.14.3.1 Affected: 9.14.3.9 Affected: 9.14.3.11 Affected: 9.14.3.13 Affected: 9.14.3.18 Affected: 9.14.3.15 Affected: 9.14.4 Affected: 9.14.4.6 Affected: 9.14.4.7 Affected: 9.14.4.12 Affected: 9.14.4.13 Affected: 9.14.4.14 Affected: 9.14.4.15 Affected: 9.14.4.17 Affected: 9.14.4.22 Affected: 9.14.4.23 Affected: 9.14.4.24 Affected: 9.16.1 Affected: 9.16.1.28 Affected: 9.16.2 Affected: 9.16.2.3 Affected: 9.16.2.7 Affected: 9.16.2.11 Affected: 9.16.2.13 Affected: 9.16.2.14 Affected: 9.16.3 Affected: 9.16.3.3 Affected: 9.16.3.14 Affected: 9.16.3.15 Affected: 9.16.3.19 Affected: 9.16.3.23 Affected: 9.16.4 Affected: 9.16.4.9 Affected: 9.16.4.14 Affected: 9.16.4.19 Affected: 9.16.4.27 Affected: 9.16.4.38 Affected: 9.16.4.39 Affected: 9.16.4.42 Affected: 9.16.4.48 Affected: 9.16.4.55 Affected: 9.16.4.57 Affected: 9.16.4.61 Affected: 9.16.4.62 Affected: 9.16.4.67 Affected: 9.16.4.70 Affected: 9.16.4.71 Affected: 9.16.4.76 Affected: 9.16.4.82 Affected: 9.16.4.84 Affected: 9.17.1 Affected: 9.17.1.7 Affected: 9.17.1.9 Affected: 9.17.1.10 Affected: 9.17.1.11 Affected: 9.17.1.13 Affected: 9.17.1.15 Affected: 9.17.1.20 Affected: 9.17.1.30 Affected: 9.17.1.33 Affected: 9.17.1.39 Affected: 9.17.1.45 Affected: 9.17.1.46 Affected: 9.18.1 Affected: 9.18.1.3 Affected: 9.18.2 Affected: 9.18.2.5 Affected: 9.18.2.7 Affected: 9.18.2.8 Affected: 9.18.3 Affected: 9.18.3.39 Affected: 9.18.3.46 Affected: 9.18.3.53 Affected: 9.18.3.55 Affected: 9.18.3.56 Affected: 9.18.4 Affected: 9.18.4.5 Affected: 9.18.4.8 Affected: 9.18.4.22 Affected: 9.18.4.24 Affected: 9.18.4.29 Affected: 9.18.4.34 Affected: 9.18.4.40 Affected: 9.18.4.47 Affected: 9.18.4.50 Affected: 9.18.4.52 Affected: 9.18.4.53 Affected: 9.18.4.57 Affected: 9.18.4.66 Affected: 9.18.4.67 Affected: 9.18.4.68 Affected: 9.19.1 Affected: 9.19.1.5 Affected: 9.19.1.9 Affected: 9.19.1.12 Affected: 9.19.1.18 Affected: 9.19.1.22 Affected: 9.19.1.24 Affected: 9.19.1.27 Affected: 9.19.1.28 Affected: 9.19.1.31 Affected: 9.19.1.37 Affected: 9.19.1.38 Affected: 9.19.1.42 Affected: 9.20.1 Affected: 9.20.1.5 Affected: 9.20.2 Affected: 9.20.2.10 Affected: 9.20.2.21 Affected: 9.20.2.22 Affected: 9.20.3 Affected: 9.20.3.4 Affected: 9.20.3.7 Affected: 9.20.3.9 Affected: 9.20.3.10 Affected: 9.20.3.13 Affected: 9.20.3.16 Affected: 9.20.3.20 Affected: 9.20.4 Affected: 9.20.4.7 Affected: 9.22.1.1 Affected: 9.22.1.3 Affected: 9.22.1.2 Affected: 9.22.1.6 Affected: 9.22.2 Affected: 9.22.2.4 Affected: 9.22.2.9 Affected: 9.22.2.13 Affected: 9.23.1 Affected: 9.23.1.3 Affected: 9.23.1.7 Affected: 9.23.1.13
Cisco	Cisco Secure Firewall Threat Defense (FTD) Software	Affected: 6.2.3 Affected: 6.2.3.1 Affected: 6.2.3.2 Affected: 6.2.3.3 Affected: 6.2.3.4 Affected: 6.2.3.5 Affected: 6.2.3.6 Affected: 6.2.3.7 Affected: 6.2.3.8 Affected: 6.2.3.10 Affected: 6.2.3.11 Affected: 6.2.3.9 Affected: 6.2.3.12 Affected: 6.2.3.13 Affected: 6.2.3.14 Affected: 6.2.3.15 Affected: 6.2.3.16 Affected: 6.2.3.17 Affected: 6.2.3.18 Affected: 6.6.0 Affected: 6.6.0.1 Affected: 6.6.1 Affected: 6.6.3 Affected: 6.6.4 Affected: 6.6.5 Affected: 6.6.5.1 Affected: 6.6.5.2 Affected: 6.6.7 Affected: 6.6.7.1 Affected: 6.6.7.2 Affected: 6.4.0 Affected: 6.4.0.1 Affected: 6.4.0.3 Affected: 6.4.0.2 Affected: 6.4.0.4 Affected: 6.4.0.5 Affected: 6.4.0.6 Affected: 6.4.0.7 Affected: 6.4.0.8 Affected: 6.4.0.9 Affected: 6.4.0.10 Affected: 6.4.0.11 Affected: 6.4.0.12 Affected: 6.4.0.13 Affected: 6.4.0.14 Affected: 6.4.0.15 Affected: 6.4.0.16 Affected: 6.4.0.17 Affected: 6.4.0.18 Affected: 7.0.0 Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.0.4 Affected: 7.0.5 Affected: 7.0.6 Affected: 7.0.6.1 Affected: 7.0.6.2 Affected: 7.0.6.3 Affected: 7.0.7 Affected: 7.0.8 Affected: 7.0.8.1 Affected: 7.1.0 Affected: 7.1.0.1 Affected: 7.1.0.2 Affected: 7.1.0.3 Affected: 7.2.0 Affected: 7.2.0.1 Affected: 7.2.1 Affected: 7.2.2 Affected: 7.2.3 Affected: 7.2.4 Affected: 7.2.4.1 Affected: 7.2.5 Affected: 7.2.5.1 Affected: 7.2.6 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.2.8 Affected: 7.2.8.1 Affected: 7.2.9 Affected: 7.2.10 Affected: 7.2.10.2 Affected: 7.3.0 Affected: 7.3.1 Affected: 7.3.1.1 Affected: 7.3.1.2 Affected: 7.4.0 Affected: 7.4.1 Affected: 7.4.1.1 Affected: 7.4.2 Affected: 7.4.2.1 Affected: 7.4.2.2 Affected: 7.4.2.3 Affected: 7.4.2.4 Affected: 7.6.0 Affected: 7.6.1 Affected: 7.6.2 Affected: 7.6.2.1 Affected: 7.7.0 Affected: 7.7.10 Affected: 7.7.10.1
cisco	adaptive_security_appliance	Affected: 9.8.1 Affected: 9.8.1.5 Affected: 9.8.1.7 Affected: 9.8.2 Affected: 9.8.2.8 Affected: 9.8.2.14 Affected: 9.8.2.15 Affected: 9.8.2.17 Affected: 9.8.2.20 Affected: 9.8.2.24 Affected: 9.8.2.26 Affected: 9.8.2.28 Affected: 9.8.2.33 Affected: 9.8.2.35 Affected: 9.8.2.38 Affected: 9.8.3.8 Affected: 9.8.3.11 Affected: 9.8.3.14 Affected: 9.8.3.16 Affected: 9.8.3.18 Affected: 9.8.3.21 Affected: 9.8.3 Affected: 9.8.3.26 Affected: 9.8.3.29 Affected: 9.8.4 Affected: 9.8.4.3 Affected: 9.8.4.7 Affected: 9.8.4.8 Affected: 9.8.4.10 Affected: 9.8.4.12 Affected: 9.8.4.15 Affected: 9.8.4.17 Affected: 9.8.4.25 Affected: 9.8.4.20 Affected: 9.8.4.22 Affected: 9.8.4.26 Affected: 9.8.4.29 Affected: 9.8.4.32 Affected: 9.8.4.33 Affected: 9.8.4.34 Affected: 9.8.4.35 Affected: 9.8.4.39 Affected: 9.8.4.40 Affected: 9.8.4.41 Affected: 9.8.4.43 Affected: 9.8.4.44 Affected: 9.8.4.45 Affected: 9.8.4.46 Affected: 9.8.4.48 Affected: 9.12.1 Affected: 9.12.1.2 Affected: 9.12.1.3 Affected: 9.12.2 Affected: 9.12.2.4 Affected: 9.12.2.5 Affected: 9.12.2.9 Affected: 9.12.3 Affected: 9.12.3.2 Affected: 9.12.3.7 Affected: 9.12.4 Affected: 9.12.3.12 Affected: 9.12.3.9 Affected: 9.12.2.1 Affected: 9.12.4.2 Affected: 9.12.4.4 Affected: 9.12.4.7 Affected: 9.12.4.10 Affected: 9.12.4.13 Affected: 9.12.4.8 Affected: 9.12.4.18 Affected: 9.12.4.24 Affected: 9.12.4.26 Affected: 9.12.4.29 Affected: 9.12.4.30 Affected: 9.12.4.35 Affected: 9.12.4.37 Affected: 9.12.4.38 Affected: 9.12.4.39 Affected: 9.12.4.40 Affected: 9.12.4.41 Affected: 9.12.4.47 Affected: 9.12.4.48 Affected: 9.12.4.50 Affected: 9.12.4.52 Affected: 9.12.4.54 Affected: 9.12.4.55 Affected: 9.12.4.56 Affected: 9.12.4.58 Affected: 9.12.4.62 Affected: 9.12.4.65 Affected: 9.14.1 Affected: 9.14.1.10 Affected: 9.14.1.6 Affected: 9.14.1.15 Affected: 9.14.1.19 Affected: 9.14.1.30 Affected: 9.14.2 Affected: 9.14.2.4 Affected: 9.14.2.8 Affected: 9.14.2.13 Affected: 9.14.2.15 Affected: 9.14.3 Affected: 9.14.3.1 Affected: 9.14.3.9 Affected: 9.14.3.11 Affected: 9.14.3.13 Affected: 9.14.3.18 Affected: 9.14.3.15 Affected: 9.14.4 Affected: 9.14.4.6 Affected: 9.14.4.7 Affected: 9.14.4.12 Affected: 9.14.4.13 Affected: 9.14.4.14 Affected: 9.14.4.15 Affected: 9.14.4.17 Affected: 9.14.4.22 Affected: 9.14.4.23 Affected: 9.15.1 Affected: 9.15.1.7 Affected: 9.15.1.10 Affected: 9.15.1.15 Affected: 9.15.1.16 Affected: 9.15.1.17 Affected: 9.15.1.1 Affected: 9.15.1.21 Affected: 9.16.1 Affected: 9.16.1.28 Affected: 9.16.2 Affected: 9.16.2.3 Affected: 9.16.2.7 Affected: 9.16.2.11 Affected: 9.16.2.13 Affected: 9.16.2.14 Affected: 9.16.3 Affected: 9.16.3.3 Affected: 9.16.3.14 Affected: 9.16.3.15 Affected: 9.16.3.19 Affected: 9.16.3.23 Affected: 9.16.4 Affected: 9.16.4.9 Affected: 9.16.4.14 Affected: 9.16.4.18 Affected: 9.16.4.19 Affected: 9.16.4.27 Affected: 9.16.4.38 Affected: 9.16.4.39 Affected: 9.16.4.42 Affected: 9.16.4.48 Affected: 9.16.4.55 Affected: 9.17.1 Affected: 9.17.1.7 Affected: 9.17.1.9 Affected: 9.17.1.10 Affected: 9.17.1.11 Affected: 9.17.1.13 Affected: 9.17.1.15 Affected: 9.17.1.20 Affected: 9.17.1.30 Affected: 9.17.1.33 Affected: 9.18.1 Affected: 9.18.1.3 Affected: 9.18.2 Affected: 9.18.2.5 Affected: 9.18.2.7 Affected: 9.18.2.8 Affected: 9.18.3 Affected: 9.18.3.39 Affected: 9.18.3.46 Affected: 9.18.3.53 Affected: 9.18.3.55 Affected: 9.18.3.56 Affected: 9.18.4 Affected: 9.18.4.5 Affected: 9.18.4.8 Affected: 9.19.1 Affected: 9.19.1.5 Affected: 9.19.1.9 Affected: 9.19.1.12 Affected: 9.19.1.18 Affected: 9.19.1.22 Affected: 9.19.1.24 Affected: 9.19.1.27 Affected: 9.20.1 Affected: 9.20.1.5 Affected: 9.20.2 Affected: 6.2.3 Affected: 6.2.3.1 Affected: 6.2.3.2 Affected: 6.2.3.3 Affected: 6.2.3.4 Affected: 6.2.3.5 Affected: 6.2.3.6 Affected: 6.2.3.7 Affected: 6.2.3.8 Affected: 6.2.3.10 Affected: 6.2.3.11 Affected: 6.2.3.9 Affected: 6.2.3.12 Affected: 6.2.3.13 Affected: 6.2.3.14 Affected: 6.2.3.15 Affected: 6.2.3.16 Affected: 6.2.3.17 Affected: 6.2.3.18 Affected: 6.6.0 Affected: 6.6.0.1 Affected: 6.6.1 Affected: 6.6.3 Affected: 6.6.4 Affected: 6.6.5 Affected: 6.6.5.1 Affected: 6.6.5.2 Affected: 6.6.7 Affected: 6.6.7.1 Affected: 6.4.0 Affected: 6.4.0.1 Affected: 6.4.0.3 Affected: 6.4.0.2 Affected: 6.4.0.4 Affected: 6.4.0.5 Affected: 6.4.0.6 Affected: 6.4.0.7 Affected: 6.4.0.8 Affected: 6.4.0.9 Affected: 6.4.0.10 Affected: 6.4.0.11 Affected: 6.4.0.12 Affected: 6.4.0.13 Affected: 6.4.0.14 Affected: 6.4.0.15 Affected: 6.4.0.16 Affected: 6.4.0.17 Affected: 6.7.0 Affected: 6.7.0.1 Affected: 6.7.0.2 Affected: 6.7.0.3 Affected: 7.0.0 Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.0.4 Affected: 7.0.5 Affected: 7.0.6 Affected: 7.0.6.1 Affected: 7.1.0 Affected: 7.1.0.1 Affected: 7.1.0.2 Affected: 7.1.0.3 Affected: 7.2.0 Affected: 7.2.0.1 Affected: 7.2.1 Affected: 7.2.2 Affected: 7.2.3 Affected: 7.2.4 Affected: 7.2.4.1 Affected: 7.2.5 Affected: 7.2.5.1 Affected: 7.3.0 Affected: 7.3.1 Affected: 7.3.1.1 Affected: 7.4.0 Affected: 7.4.1 cpe:2.3:o:cisco:adaptive_security_appliance:9.8.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.1.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.1.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.17:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.20:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.24:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.26:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.28:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.33:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.35:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.38:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.11:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.16:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.18:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.21:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.26:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.29:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.12:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.17:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.25:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.20:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.22:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.26:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.29:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.32:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.33:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.34:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.35:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.39:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.40:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.41:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.43:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.44:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.45:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.46:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.48:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.1.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.1.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.12:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.18:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.24:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.26:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.29:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.30:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.35:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.37:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.38:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.39:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.40:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.41:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.47:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.48:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.50:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.52:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.54:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.55:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.56:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.58:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.62:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.65:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.6:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.19:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.30:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.11:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.18:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.6:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.12:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.17:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.22:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.23:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.16:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.17:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.21:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.1.28:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.11:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.19:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.23:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.18:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.19:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.27:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.38:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.39:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.42:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.48:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.55:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.11:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.20:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.30:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.33:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.1.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.39:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.46:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.53:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.55:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.56:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.4.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.18.4.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.12:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.18:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.22:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.24:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.27:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.20.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.20.1.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:9.20.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.6:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.11:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.12:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.16:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.17:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.18:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.0.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.5.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.5.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.6.7.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.6:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.11:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.12:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.14:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.16:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.17:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.0.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.1.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.2.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.6:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.0.6.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.0.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.4.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.2.5.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.3.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.3.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.3.1.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.4.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance:7.4.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:42.299Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-asaftd-cmd-inj-ZJV8Wysm",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.1.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.1.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.17:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.20:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.24:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.26:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.28:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.33:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.35:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.2.38:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.16:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.18:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.21:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.26:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.3.29:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.12:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.17:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.25:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.20:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.22:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.26:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.29:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.32:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.33:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.34:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.35:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.39:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.40:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.41:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.43:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.44:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.45:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.46:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.8.4.48:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.1.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.1.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.12:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.3.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.2.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.18:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.24:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.26:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.29:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.30:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.35:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.37:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.38:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.39:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.40:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.41:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.47:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.48:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.50:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.52:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.54:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.55:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.56:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.58:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.62:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.12.4.65:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.19:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.1.30:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.2.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.18:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.3.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.12:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.17:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.22:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.14.4.23:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.16:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.17:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.15.1.21:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.1.28:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.2.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.19:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.3.23:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.18:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.19:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.27:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.38:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.39:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.42:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.48:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.16.4.55:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.20:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.30:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.17.1.33:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.1.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.2.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.39:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.46:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.53:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.55:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.3.56:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.4.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.18.4.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.12:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.18:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.22:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.24:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.19.1.27:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.20.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.20.1.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:9.20.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.12:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.16:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.17:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.2.3.18:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.5.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.5.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.6.7.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.12:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.13:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.14:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.15:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.16:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.4.0.17:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:6.7.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.1.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.2.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.0.6.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.1.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.4.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.2.5.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.3.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.3.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.3.1.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.4.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:adaptive_security_appliance:7.4.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "adaptive_security_appliance",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "9.8.1"
              },
              {
                "status": "affected",
                "version": "9.8.1.5"
              },
              {
                "status": "affected",
                "version": "9.8.1.7"
              },
              {
                "status": "affected",
                "version": "9.8.2"
              },
              {
                "status": "affected",
                "version": "9.8.2.8"
              },
              {
                "status": "affected",
                "version": "9.8.2.14"
              },
              {
                "status": "affected",
                "version": "9.8.2.15"
              },
              {
                "status": "affected",
                "version": "9.8.2.17"
              },
              {
                "status": "affected",
                "version": "9.8.2.20"
              },
              {
                "status": "affected",
                "version": "9.8.2.24"
              },
              {
                "status": "affected",
                "version": "9.8.2.26"
              },
              {
                "status": "affected",
                "version": "9.8.2.28"
              },
              {
                "status": "affected",
                "version": "9.8.2.33"
              },
              {
                "status": "affected",
                "version": "9.8.2.35"
              },
              {
                "status": "affected",
                "version": "9.8.2.38"
              },
              {
                "status": "affected",
                "version": "9.8.3.8"
              },
              {
                "status": "affected",
                "version": "9.8.3.11"
              },
              {
                "status": "affected",
                "version": "9.8.3.14"
              },
              {
                "status": "affected",
                "version": "9.8.3.16"
              },
              {
                "status": "affected",
                "version": "9.8.3.18"
              },
              {
                "status": "affected",
                "version": "9.8.3.21"
              },
              {
                "status": "affected",
                "version": "9.8.3"
              },
              {
                "status": "affected",
                "version": "9.8.3.26"
              },
              {
                "status": "affected",
                "version": "9.8.3.29"
              },
              {
                "status": "affected",
                "version": "9.8.4"
              },
              {
                "status": "affected",
                "version": "9.8.4.3"
              },
              {
                "status": "affected",
                "version": "9.8.4.7"
              },
              {
                "status": "affected",
                "version": "9.8.4.8"
              },
              {
                "status": "affected",
                "version": "9.8.4.10"
              },
              {
                "status": "affected",
                "version": "9.8.4.12"
              },
              {
                "status": "affected",
                "version": "9.8.4.15"
              },
              {
                "status": "affected",
                "version": "9.8.4.17"
              },
              {
                "status": "affected",
                "version": "9.8.4.25"
              },
              {
                "status": "affected",
                "version": "9.8.4.20"
              },
              {
                "status": "affected",
                "version": "9.8.4.22"
              },
              {
                "status": "affected",
                "version": "9.8.4.26"
              },
              {
                "status": "affected",
                "version": "9.8.4.29"
              },
              {
                "status": "affected",
                "version": "9.8.4.32"
              },
              {
                "status": "affected",
                "version": "9.8.4.33"
              },
              {
                "status": "affected",
                "version": "9.8.4.34"
              },
              {
                "status": "affected",
                "version": "9.8.4.35"
              },
              {
                "status": "affected",
                "version": "9.8.4.39"
              },
              {
                "status": "affected",
                "version": "9.8.4.40"
              },
              {
                "status": "affected",
                "version": "9.8.4.41"
              },
              {
                "status": "affected",
                "version": "9.8.4.43"
              },
              {
                "status": "affected",
                "version": "9.8.4.44"
              },
              {
                "status": "affected",
                "version": "9.8.4.45"
              },
              {
                "status": "affected",
                "version": "9.8.4.46"
              },
              {
                "status": "affected",
                "version": "9.8.4.48"
              },
              {
                "status": "affected",
                "version": "9.12.1"
              },
              {
                "status": "affected",
                "version": "9.12.1.2"
              },
              {
                "status": "affected",
                "version": "9.12.1.3"
              },
              {
                "status": "affected",
                "version": "9.12.2"
              },
              {
                "status": "affected",
                "version": "9.12.2.4"
              },
              {
                "status": "affected",
                "version": "9.12.2.5"
              },
              {
                "status": "affected",
                "version": "9.12.2.9"
              },
              {
                "status": "affected",
                "version": "9.12.3"
              },
              {
                "status": "affected",
                "version": "9.12.3.2"
              },
              {
                "status": "affected",
                "version": "9.12.3.7"
              },
              {
                "status": "affected",
                "version": "9.12.4"
              },
              {
                "status": "affected",
                "version": "9.12.3.12"
              },
              {
                "status": "affected",
                "version": "9.12.3.9"
              },
              {
                "status": "affected",
                "version": "9.12.2.1"
              },
              {
                "status": "affected",
                "version": "9.12.4.2"
              },
              {
                "status": "affected",
                "version": "9.12.4.4"
              },
              {
                "status": "affected",
                "version": "9.12.4.7"
              },
              {
                "status": "affected",
                "version": "9.12.4.10"
              },
              {
                "status": "affected",
                "version": "9.12.4.13"
              },
              {
                "status": "affected",
                "version": "9.12.4.8"
              },
              {
                "status": "affected",
                "version": "9.12.4.18"
              },
              {
                "status": "affected",
                "version": "9.12.4.24"
              },
              {
                "status": "affected",
                "version": "9.12.4.26"
              },
              {
                "status": "affected",
                "version": "9.12.4.29"
              },
              {
                "status": "affected",
                "version": "9.12.4.30"
              },
              {
                "status": "affected",
                "version": "9.12.4.35"
              },
              {
                "status": "affected",
                "version": "9.12.4.37"
              },
              {
                "status": "affected",
                "version": "9.12.4.38"
              },
              {
                "status": "affected",
                "version": "9.12.4.39"
              },
              {
                "status": "affected",
                "version": "9.12.4.40"
              },
              {
                "status": "affected",
                "version": "9.12.4.41"
              },
              {
                "status": "affected",
                "version": "9.12.4.47"
              },
              {
                "status": "affected",
                "version": "9.12.4.48"
              },
              {
                "status": "affected",
                "version": "9.12.4.50"
              },
              {
                "status": "affected",
                "version": "9.12.4.52"
              },
              {
                "status": "affected",
                "version": "9.12.4.54"
              },
              {
                "status": "affected",
                "version": "9.12.4.55"
              },
              {
                "status": "affected",
                "version": "9.12.4.56"
              },
              {
                "status": "affected",
                "version": "9.12.4.58"
              },
              {
                "status": "affected",
                "version": "9.12.4.62"
              },
              {
                "status": "affected",
                "version": "9.12.4.65"
              },
              {
                "status": "affected",
                "version": "9.14.1"
              },
              {
                "status": "affected",
                "version": "9.14.1.10"
              },
              {
                "status": "affected",
                "version": "9.14.1.6"
              },
              {
                "status": "affected",
                "version": "9.14.1.15"
              },
              {
                "status": "affected",
                "version": "9.14.1.19"
              },
              {
                "status": "affected",
                "version": "9.14.1.30"
              },
              {
                "status": "affected",
                "version": "9.14.2"
              },
              {
                "status": "affected",
                "version": "9.14.2.4"
              },
              {
                "status": "affected",
                "version": "9.14.2.8"
              },
              {
                "status": "affected",
                "version": "9.14.2.13"
              },
              {
                "status": "affected",
                "version": "9.14.2.15"
              },
              {
                "status": "affected",
                "version": "9.14.3"
              },
              {
                "status": "affected",
                "version": "9.14.3.1"
              },
              {
                "status": "affected",
                "version": "9.14.3.9"
              },
              {
                "status": "affected",
                "version": "9.14.3.11"
              },
              {
                "status": "affected",
                "version": "9.14.3.13"
              },
              {
                "status": "affected",
                "version": "9.14.3.18"
              },
              {
                "status": "affected",
                "version": "9.14.3.15"
              },
              {
                "status": "affected",
                "version": "9.14.4"
              },
              {
                "status": "affected",
                "version": "9.14.4.6"
              },
              {
                "status": "affected",
                "version": "9.14.4.7"
              },
              {
                "status": "affected",
                "version": "9.14.4.12"
              },
              {
                "status": "affected",
                "version": "9.14.4.13"
              },
              {
                "status": "affected",
                "version": "9.14.4.14"
              },
              {
                "status": "affected",
                "version": "9.14.4.15"
              },
              {
                "status": "affected",
                "version": "9.14.4.17"
              },
              {
                "status": "affected",
                "version": "9.14.4.22"
              },
              {
                "status": "affected",
                "version": "9.14.4.23"
              },
              {
                "status": "affected",
                "version": "9.15.1"
              },
              {
                "status": "affected",
                "version": "9.15.1.7"
              },
              {
                "status": "affected",
                "version": "9.15.1.10"
              },
              {
                "status": "affected",
                "version": "9.15.1.15"
              },
              {
                "status": "affected",
                "version": "9.15.1.16"
              },
              {
                "status": "affected",
                "version": "9.15.1.17"
              },
              {
                "status": "affected",
                "version": "9.15.1.1"
              },
              {
                "status": "affected",
                "version": "9.15.1.21"
              },
              {
                "status": "affected",
                "version": "9.16.1"
              },
              {
                "status": "affected",
                "version": "9.16.1.28"
              },
              {
                "status": "affected",
                "version": "9.16.2"
              },
              {
                "status": "affected",
                "version": "9.16.2.3"
              },
              {
                "status": "affected",
                "version": "9.16.2.7"
              },
              {
                "status": "affected",
                "version": "9.16.2.11"
              },
              {
                "status": "affected",
                "version": "9.16.2.13"
              },
              {
                "status": "affected",
                "version": "9.16.2.14"
              },
              {
                "status": "affected",
                "version": "9.16.3"
              },
              {
                "status": "affected",
                "version": "9.16.3.3"
              },
              {
                "status": "affected",
                "version": "9.16.3.14"
              },
              {
                "status": "affected",
                "version": "9.16.3.15"
              },
              {
                "status": "affected",
                "version": "9.16.3.19"
              },
              {
                "status": "affected",
                "version": "9.16.3.23"
              },
              {
                "status": "affected",
                "version": "9.16.4"
              },
              {
                "status": "affected",
                "version": "9.16.4.9"
              },
              {
                "status": "affected",
                "version": "9.16.4.14"
              },
              {
                "status": "affected",
                "version": "9.16.4.18"
              },
              {
                "status": "affected",
                "version": "9.16.4.19"
              },
              {
                "status": "affected",
                "version": "9.16.4.27"
              },
              {
                "status": "affected",
                "version": "9.16.4.38"
              },
              {
                "status": "affected",
                "version": "9.16.4.39"
              },
              {
                "status": "affected",
                "version": "9.16.4.42"
              },
              {
                "status": "affected",
                "version": "9.16.4.48"
              },
              {
                "status": "affected",
                "version": "9.16.4.55"
              },
              {
                "status": "affected",
                "version": "9.17.1"
              },
              {
                "status": "affected",
                "version": "9.17.1.7"
              },
              {
                "status": "affected",
                "version": "9.17.1.9"
              },
              {
                "status": "affected",
                "version": "9.17.1.10"
              },
              {
                "status": "affected",
                "version": "9.17.1.11"
              },
              {
                "status": "affected",
                "version": "9.17.1.13"
              },
              {
                "status": "affected",
                "version": "9.17.1.15"
              },
              {
                "status": "affected",
                "version": "9.17.1.20"
              },
              {
                "status": "affected",
                "version": "9.17.1.30"
              },
              {
                "status": "affected",
                "version": "9.17.1.33"
              },
              {
                "status": "affected",
                "version": "9.18.1"
              },
              {
                "status": "affected",
                "version": "9.18.1.3"
              },
              {
                "status": "affected",
                "version": "9.18.2"
              },
              {
                "status": "affected",
                "version": "9.18.2.5"
              },
              {
                "status": "affected",
                "version": "9.18.2.7"
              },
              {
                "status": "affected",
                "version": "9.18.2.8"
              },
              {
                "status": "affected",
                "version": "9.18.3"
              },
              {
                "status": "affected",
                "version": "9.18.3.39"
              },
              {
                "status": "affected",
                "version": "9.18.3.46"
              },
              {
                "status": "affected",
                "version": "9.18.3.53"
              },
              {
                "status": "affected",
                "version": "9.18.3.55"
              },
              {
                "status": "affected",
                "version": "9.18.3.56"
              },
              {
                "status": "affected",
                "version": "9.18.4"
              },
              {
                "status": "affected",
                "version": "9.18.4.5"
              },
              {
                "status": "affected",
                "version": "9.18.4.8"
              },
              {
                "status": "affected",
                "version": "9.19.1"
              },
              {
                "status": "affected",
                "version": "9.19.1.5"
              },
              {
                "status": "affected",
                "version": "9.19.1.9"
              },
              {
                "status": "affected",
                "version": "9.19.1.12"
              },
              {
                "status": "affected",
                "version": "9.19.1.18"
              },
              {
                "status": "affected",
                "version": "9.19.1.22"
              },
              {
                "status": "affected",
                "version": "9.19.1.24"
              },
              {
                "status": "affected",
                "version": "9.19.1.27"
              },
              {
                "status": "affected",
                "version": "9.20.1"
              },
              {
                "status": "affected",
                "version": "9.20.1.5"
              },
              {
                "status": "affected",
                "version": "9.20.2"
              },
              {
                "status": "affected",
                "version": "6.2.3"
              },
              {
                "status": "affected",
                "version": "6.2.3.1"
              },
              {
                "status": "affected",
                "version": "6.2.3.2"
              },
              {
                "status": "affected",
                "version": "6.2.3.3"
              },
              {
                "status": "affected",
                "version": "6.2.3.4"
              },
              {
                "status": "affected",
                "version": "6.2.3.5"
              },
              {
                "status": "affected",
                "version": "6.2.3.6"
              },
              {
                "status": "affected",
                "version": "6.2.3.7"
              },
              {
                "status": "affected",
                "version": "6.2.3.8"
              },
              {
                "status": "affected",
                "version": "6.2.3.10"
              },
              {
                "status": "affected",
                "version": "6.2.3.11"
              },
              {
                "status": "affected",
                "version": "6.2.3.9"
              },
              {
                "status": "affected",
                "version": "6.2.3.12"
              },
              {
                "status": "affected",
                "version": "6.2.3.13"
              },
              {
                "status": "affected",
                "version": "6.2.3.14"
              },
              {
                "status": "affected",
                "version": "6.2.3.15"
              },
              {
                "status": "affected",
                "version": "6.2.3.16"
              },
              {
                "status": "affected",
                "version": "6.2.3.17"
              },
              {
                "status": "affected",
                "version": "6.2.3.18"
              },
              {
                "status": "affected",
                "version": "6.6.0"
              },
              {
                "status": "affected",
                "version": "6.6.0.1"
              },
              {
                "status": "affected",
                "version": "6.6.1"
              },
              {
                "status": "affected",
                "version": "6.6.3"
              },
              {
                "status": "affected",
                "version": "6.6.4"
              },
              {
                "status": "affected",
                "version": "6.6.5"
              },
              {
                "status": "affected",
                "version": "6.6.5.1"
              },
              {
                "status": "affected",
                "version": "6.6.5.2"
              },
              {
                "status": "affected",
                "version": "6.6.7"
              },
              {
                "status": "affected",
                "version": "6.6.7.1"
              },
              {
                "status": "affected",
                "version": "6.4.0"
              },
              {
                "status": "affected",
                "version": "6.4.0.1"
              },
              {
                "status": "affected",
                "version": "6.4.0.3"
              },
              {
                "status": "affected",
                "version": "6.4.0.2"
              },
              {
                "status": "affected",
                "version": "6.4.0.4"
              },
              {
                "status": "affected",
                "version": "6.4.0.5"
              },
              {
                "status": "affected",
                "version": "6.4.0.6"
              },
              {
                "status": "affected",
                "version": "6.4.0.7"
              },
              {
                "status": "affected",
                "version": "6.4.0.8"
              },
              {
                "status": "affected",
                "version": "6.4.0.9"
              },
              {
                "status": "affected",
                "version": "6.4.0.10"
              },
              {
                "status": "affected",
                "version": "6.4.0.11"
              },
              {
                "status": "affected",
                "version": "6.4.0.12"
              },
              {
                "status": "affected",
                "version": "6.4.0.13"
              },
              {
                "status": "affected",
                "version": "6.4.0.14"
              },
              {
                "status": "affected",
                "version": "6.4.0.15"
              },
              {
                "status": "affected",
                "version": "6.4.0.16"
              },
              {
                "status": "affected",
                "version": "6.4.0.17"
              },
              {
                "status": "affected",
                "version": "6.7.0"
              },
              {
                "status": "affected",
                "version": "6.7.0.1"
              },
              {
                "status": "affected",
                "version": "6.7.0.2"
              },
              {
                "status": "affected",
                "version": "6.7.0.3"
              },
              {
                "status": "affected",
                "version": "7.0.0"
              },
              {
                "status": "affected",
                "version": "7.0.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1.1"
              },
              {
                "status": "affected",
                "version": "7.0.2"
              },
              {
                "status": "affected",
                "version": "7.0.2.1"
              },
              {
                "status": "affected",
                "version": "7.0.3"
              },
              {
                "status": "affected",
                "version": "7.0.4"
              },
              {
                "status": "affected",
                "version": "7.0.5"
              },
              {
                "status": "affected",
                "version": "7.0.6"
              },
              {
                "status": "affected",
                "version": "7.0.6.1"
              },
              {
                "status": "affected",
                "version": "7.1.0"
              },
              {
                "status": "affected",
                "version": "7.1.0.1"
              },
              {
                "status": "affected",
                "version": "7.1.0.2"
              },
              {
                "status": "affected",
                "version": "7.1.0.3"
              },
              {
                "status": "affected",
                "version": "7.2.0"
              },
              {
                "status": "affected",
                "version": "7.2.0.1"
              },
              {
                "status": "affected",
                "version": "7.2.1"
              },
              {
                "status": "affected",
                "version": "7.2.2"
              },
              {
                "status": "affected",
                "version": "7.2.3"
              },
              {
                "status": "affected",
                "version": "7.2.4"
              },
              {
                "status": "affected",
                "version": "7.2.4.1"
              },
              {
                "status": "affected",
                "version": "7.2.5"
              },
              {
                "status": "affected",
                "version": "7.2.5.1"
              },
              {
                "status": "affected",
                "version": "7.3.0"
              },
              {
                "status": "affected",
                "version": "7.3.1"
              },
              {
                "status": "affected",
                "version": "7.3.1.1"
              },
              {
                "status": "affected",
                "version": "7.4.0"
              },
              {
                "status": "affected",
                "version": "7.4.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20358",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-19T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-20T03:55:11.390Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "9.8.1"
            },
            {
              "status": "affected",
              "version": "9.8.1.5"
            },
            {
              "status": "affected",
              "version": "9.8.1.7"
            },
            {
              "status": "affected",
              "version": "9.8.2"
            },
            {
              "status": "affected",
              "version": "9.8.2.8"
            },
            {
              "status": "affected",
              "version": "9.8.2.14"
            },
            {
              "status": "affected",
              "version": "9.8.2.15"
            },
            {
              "status": "affected",
              "version": "9.8.2.17"
            },
            {
              "status": "affected",
              "version": "9.8.2.20"
            },
            {
              "status": "affected",
              "version": "9.8.2.24"
            },
            {
              "status": "affected",
              "version": "9.8.2.26"
            },
            {
              "status": "affected",
              "version": "9.8.2.28"
            },
            {
              "status": "affected",
              "version": "9.8.2.33"
            },
            {
              "status": "affected",
              "version": "9.8.2.35"
            },
            {
              "status": "affected",
              "version": "9.8.2.38"
            },
            {
              "status": "affected",
              "version": "9.8.3.8"
            },
            {
              "status": "affected",
              "version": "9.8.3.11"
            },
            {
              "status": "affected",
              "version": "9.8.3.14"
            },
            {
              "status": "affected",
              "version": "9.8.3.16"
            },
            {
              "status": "affected",
              "version": "9.8.3.18"
            },
            {
              "status": "affected",
              "version": "9.8.3.21"
            },
            {
              "status": "affected",
              "version": "9.8.3"
            },
            {
              "status": "affected",
              "version": "9.8.3.26"
            },
            {
              "status": "affected",
              "version": "9.8.3.29"
            },
            {
              "status": "affected",
              "version": "9.8.4"
            },
            {
              "status": "affected",
              "version": "9.8.4.3"
            },
            {
              "status": "affected",
              "version": "9.8.4.7"
            },
            {
              "status": "affected",
              "version": "9.8.4.8"
            },
            {
              "status": "affected",
              "version": "9.8.4.10"
            },
            {
              "status": "affected",
              "version": "9.8.4.12"
            },
            {
              "status": "affected",
              "version": "9.8.4.15"
            },
            {
              "status": "affected",
              "version": "9.8.4.17"
            },
            {
              "status": "affected",
              "version": "9.8.2.45"
            },
            {
              "status": "affected",
              "version": "9.8.4.25"
            },
            {
              "status": "affected",
              "version": "9.8.4.20"
            },
            {
              "status": "affected",
              "version": "9.8.4.22"
            },
            {
              "status": "affected",
              "version": "9.8.4.26"
            },
            {
              "status": "affected",
              "version": "9.8.4.29"
            },
            {
              "status": "affected",
              "version": "9.8.4.32"
            },
            {
              "status": "affected",
              "version": "9.8.4.34"
            },
            {
              "status": "affected",
              "version": "9.8.4.35"
            },
            {
              "status": "affected",
              "version": "9.8.4.39"
            },
            {
              "status": "affected",
              "version": "9.8.4.40"
            },
            {
              "status": "affected",
              "version": "9.8.4.41"
            },
            {
              "status": "affected",
              "version": "9.8.4.43"
            },
            {
              "status": "affected",
              "version": "9.8.4.44"
            },
            {
              "status": "affected",
              "version": "9.8.4.45"
            },
            {
              "status": "affected",
              "version": "9.8.4.46"
            },
            {
              "status": "affected",
              "version": "9.8.4.48"
            },
            {
              "status": "affected",
              "version": "9.12.1"
            },
            {
              "status": "affected",
              "version": "9.12.1.2"
            },
            {
              "status": "affected",
              "version": "9.12.1.3"
            },
            {
              "status": "affected",
              "version": "9.12.2"
            },
            {
              "status": "affected",
              "version": "9.12.2.4"
            },
            {
              "status": "affected",
              "version": "9.12.2.5"
            },
            {
              "status": "affected",
              "version": "9.12.2.9"
            },
            {
              "status": "affected",
              "version": "9.12.3"
            },
            {
              "status": "affected",
              "version": "9.12.3.2"
            },
            {
              "status": "affected",
              "version": "9.12.3.7"
            },
            {
              "status": "affected",
              "version": "9.12.4"
            },
            {
              "status": "affected",
              "version": "9.12.3.12"
            },
            {
              "status": "affected",
              "version": "9.12.3.9"
            },
            {
              "status": "affected",
              "version": "9.12.2.1"
            },
            {
              "status": "affected",
              "version": "9.12.4.2"
            },
            {
              "status": "affected",
              "version": "9.12.4.4"
            },
            {
              "status": "affected",
              "version": "9.12.4.7"
            },
            {
              "status": "affected",
              "version": "9.12.4.10"
            },
            {
              "status": "affected",
              "version": "9.12.4.13"
            },
            {
              "status": "affected",
              "version": "9.12.4.8"
            },
            {
              "status": "affected",
              "version": "9.12.4.18"
            },
            {
              "status": "affected",
              "version": "9.12.4.24"
            },
            {
              "status": "affected",
              "version": "9.12.4.26"
            },
            {
              "status": "affected",
              "version": "9.12.4.29"
            },
            {
              "status": "affected",
              "version": "9.12.4.30"
            },
            {
              "status": "affected",
              "version": "9.12.4.35"
            },
            {
              "status": "affected",
              "version": "9.12.4.37"
            },
            {
              "status": "affected",
              "version": "9.12.4.38"
            },
            {
              "status": "affected",
              "version": "9.12.4.39"
            },
            {
              "status": "affected",
              "version": "9.12.4.40"
            },
            {
              "status": "affected",
              "version": "9.12.4.41"
            },
            {
              "status": "affected",
              "version": "9.12.4.47"
            },
            {
              "status": "affected",
              "version": "9.12.4.48"
            },
            {
              "status": "affected",
              "version": "9.12.4.50"
            },
            {
              "status": "affected",
              "version": "9.12.4.52"
            },
            {
              "status": "affected",
              "version": "9.12.4.54"
            },
            {
              "status": "affected",
              "version": "9.12.4.55"
            },
            {
              "status": "affected",
              "version": "9.12.4.56"
            },
            {
              "status": "affected",
              "version": "9.12.4.58"
            },
            {
              "status": "affected",
              "version": "9.12.4.62"
            },
            {
              "status": "affected",
              "version": "9.12.4.65"
            },
            {
              "status": "affected",
              "version": "9.12.4.67"
            },
            {
              "status": "affected",
              "version": "9.14.1"
            },
            {
              "status": "affected",
              "version": "9.14.1.10"
            },
            {
              "status": "affected",
              "version": "9.14.1.6"
            },
            {
              "status": "affected",
              "version": "9.14.1.15"
            },
            {
              "status": "affected",
              "version": "9.14.1.19"
            },
            {
              "status": "affected",
              "version": "9.14.1.30"
            },
            {
              "status": "affected",
              "version": "9.14.2"
            },
            {
              "status": "affected",
              "version": "9.14.2.4"
            },
            {
              "status": "affected",
              "version": "9.14.2.8"
            },
            {
              "status": "affected",
              "version": "9.14.2.13"
            },
            {
              "status": "affected",
              "version": "9.14.2.15"
            },
            {
              "status": "affected",
              "version": "9.14.3"
            },
            {
              "status": "affected",
              "version": "9.14.3.1"
            },
            {
              "status": "affected",
              "version": "9.14.3.9"
            },
            {
              "status": "affected",
              "version": "9.14.3.11"
            },
            {
              "status": "affected",
              "version": "9.14.3.13"
            },
            {
              "status": "affected",
              "version": "9.14.3.18"
            },
            {
              "status": "affected",
              "version": "9.14.3.15"
            },
            {
              "status": "affected",
              "version": "9.14.4"
            },
            {
              "status": "affected",
              "version": "9.14.4.6"
            },
            {
              "status": "affected",
              "version": "9.14.4.7"
            },
            {
              "status": "affected",
              "version": "9.14.4.12"
            },
            {
              "status": "affected",
              "version": "9.14.4.13"
            },
            {
              "status": "affected",
              "version": "9.14.4.14"
            },
            {
              "status": "affected",
              "version": "9.14.4.15"
            },
            {
              "status": "affected",
              "version": "9.14.4.17"
            },
            {
              "status": "affected",
              "version": "9.14.4.22"
            },
            {
              "status": "affected",
              "version": "9.14.4.23"
            },
            {
              "status": "affected",
              "version": "9.14.4.24"
            },
            {
              "status": "affected",
              "version": "9.16.1"
            },
            {
              "status": "affected",
              "version": "9.16.1.28"
            },
            {
              "status": "affected",
              "version": "9.16.2"
            },
            {
              "status": "affected",
              "version": "9.16.2.3"
            },
            {
              "status": "affected",
              "version": "9.16.2.7"
            },
            {
              "status": "affected",
              "version": "9.16.2.11"
            },
            {
              "status": "affected",
              "version": "9.16.2.13"
            },
            {
              "status": "affected",
              "version": "9.16.2.14"
            },
            {
              "status": "affected",
              "version": "9.16.3"
            },
            {
              "status": "affected",
              "version": "9.16.3.3"
            },
            {
              "status": "affected",
              "version": "9.16.3.14"
            },
            {
              "status": "affected",
              "version": "9.16.3.15"
            },
            {
              "status": "affected",
              "version": "9.16.3.19"
            },
            {
              "status": "affected",
              "version": "9.16.3.23"
            },
            {
              "status": "affected",
              "version": "9.16.4"
            },
            {
              "status": "affected",
              "version": "9.16.4.9"
            },
            {
              "status": "affected",
              "version": "9.16.4.14"
            },
            {
              "status": "affected",
              "version": "9.16.4.19"
            },
            {
              "status": "affected",
              "version": "9.16.4.27"
            },
            {
              "status": "affected",
              "version": "9.16.4.38"
            },
            {
              "status": "affected",
              "version": "9.16.4.39"
            },
            {
              "status": "affected",
              "version": "9.16.4.42"
            },
            {
              "status": "affected",
              "version": "9.16.4.48"
            },
            {
              "status": "affected",
              "version": "9.16.4.55"
            },
            {
              "status": "affected",
              "version": "9.16.4.57"
            },
            {
              "status": "affected",
              "version": "9.16.4.61"
            },
            {
              "status": "affected",
              "version": "9.16.4.62"
            },
            {
              "status": "affected",
              "version": "9.16.4.67"
            },
            {
              "status": "affected",
              "version": "9.16.4.70"
            },
            {
              "status": "affected",
              "version": "9.16.4.71"
            },
            {
              "status": "affected",
              "version": "9.16.4.76"
            },
            {
              "status": "affected",
              "version": "9.16.4.82"
            },
            {
              "status": "affected",
              "version": "9.16.4.84"
            },
            {
              "status": "affected",
              "version": "9.17.1"
            },
            {
              "status": "affected",
              "version": "9.17.1.7"
            },
            {
              "status": "affected",
              "version": "9.17.1.9"
            },
            {
              "status": "affected",
              "version": "9.17.1.10"
            },
            {
              "status": "affected",
              "version": "9.17.1.11"
            },
            {
              "status": "affected",
              "version": "9.17.1.13"
            },
            {
              "status": "affected",
              "version": "9.17.1.15"
            },
            {
              "status": "affected",
              "version": "9.17.1.20"
            },
            {
              "status": "affected",
              "version": "9.17.1.30"
            },
            {
              "status": "affected",
              "version": "9.17.1.33"
            },
            {
              "status": "affected",
              "version": "9.17.1.39"
            },
            {
              "status": "affected",
              "version": "9.17.1.45"
            },
            {
              "status": "affected",
              "version": "9.17.1.46"
            },
            {
              "status": "affected",
              "version": "9.18.1"
            },
            {
              "status": "affected",
              "version": "9.18.1.3"
            },
            {
              "status": "affected",
              "version": "9.18.2"
            },
            {
              "status": "affected",
              "version": "9.18.2.5"
            },
            {
              "status": "affected",
              "version": "9.18.2.7"
            },
            {
              "status": "affected",
              "version": "9.18.2.8"
            },
            {
              "status": "affected",
              "version": "9.18.3"
            },
            {
              "status": "affected",
              "version": "9.18.3.39"
            },
            {
              "status": "affected",
              "version": "9.18.3.46"
            },
            {
              "status": "affected",
              "version": "9.18.3.53"
            },
            {
              "status": "affected",
              "version": "9.18.3.55"
            },
            {
              "status": "affected",
              "version": "9.18.3.56"
            },
            {
              "status": "affected",
              "version": "9.18.4"
            },
            {
              "status": "affected",
              "version": "9.18.4.5"
            },
            {
              "status": "affected",
              "version": "9.18.4.8"
            },
            {
              "status": "affected",
              "version": "9.18.4.22"
            },
            {
              "status": "affected",
              "version": "9.18.4.24"
            },
            {
              "status": "affected",
              "version": "9.18.4.29"
            },
            {
              "status": "affected",
              "version": "9.18.4.34"
            },
            {
              "status": "affected",
              "version": "9.18.4.40"
            },
            {
              "status": "affected",
              "version": "9.18.4.47"
            },
            {
              "status": "affected",
              "version": "9.18.4.50"
            },
            {
              "status": "affected",
              "version": "9.18.4.52"
            },
            {
              "status": "affected",
              "version": "9.18.4.53"
            },
            {
              "status": "affected",
              "version": "9.18.4.57"
            },
            {
              "status": "affected",
              "version": "9.18.4.66"
            },
            {
              "status": "affected",
              "version": "9.18.4.67"
            },
            {
              "status": "affected",
              "version": "9.18.4.68"
            },
            {
              "status": "affected",
              "version": "9.19.1"
            },
            {
              "status": "affected",
              "version": "9.19.1.5"
            },
            {
              "status": "affected",
              "version": "9.19.1.9"
            },
            {
              "status": "affected",
              "version": "9.19.1.12"
            },
            {
              "status": "affected",
              "version": "9.19.1.18"
            },
            {
              "status": "affected",
              "version": "9.19.1.22"
            },
            {
              "status": "affected",
              "version": "9.19.1.24"
            },
            {
              "status": "affected",
              "version": "9.19.1.27"
            },
            {
              "status": "affected",
              "version": "9.19.1.28"
            },
            {
              "status": "affected",
              "version": "9.19.1.31"
            },
            {
              "status": "affected",
              "version": "9.19.1.37"
            },
            {
              "status": "affected",
              "version": "9.19.1.38"
            },
            {
              "status": "affected",
              "version": "9.19.1.42"
            },
            {
              "status": "affected",
              "version": "9.20.1"
            },
            {
              "status": "affected",
              "version": "9.20.1.5"
            },
            {
              "status": "affected",
              "version": "9.20.2"
            },
            {
              "status": "affected",
              "version": "9.20.2.10"
            },
            {
              "status": "affected",
              "version": "9.20.2.21"
            },
            {
              "status": "affected",
              "version": "9.20.2.22"
            },
            {
              "status": "affected",
              "version": "9.20.3"
            },
            {
              "status": "affected",
              "version": "9.20.3.4"
            },
            {
              "status": "affected",
              "version": "9.20.3.7"
            },
            {
              "status": "affected",
              "version": "9.20.3.9"
            },
            {
              "status": "affected",
              "version": "9.20.3.10"
            },
            {
              "status": "affected",
              "version": "9.20.3.13"
            },
            {
              "status": "affected",
              "version": "9.20.3.16"
            },
            {
              "status": "affected",
              "version": "9.20.3.20"
            },
            {
              "status": "affected",
              "version": "9.20.4"
            },
            {
              "status": "affected",
              "version": "9.20.4.7"
            },
            {
              "status": "affected",
              "version": "9.22.1.1"
            },
            {
              "status": "affected",
              "version": "9.22.1.3"
            },
            {
              "status": "affected",
              "version": "9.22.1.2"
            },
            {
              "status": "affected",
              "version": "9.22.1.6"
            },
            {
              "status": "affected",
              "version": "9.22.2"
            },
            {
              "status": "affected",
              "version": "9.22.2.4"
            },
            {
              "status": "affected",
              "version": "9.22.2.9"
            },
            {
              "status": "affected",
              "version": "9.22.2.13"
            },
            {
              "status": "affected",
              "version": "9.23.1"
            },
            {
              "status": "affected",
              "version": "9.23.1.3"
            },
            {
              "status": "affected",
              "version": "9.23.1.7"
            },
            {
              "status": "affected",
              "version": "9.23.1.13"
            }
          ]
        },
        {
          "product": "Cisco Secure Firewall Threat Defense (FTD) Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.2.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.3.2"
            },
            {
              "status": "affected",
              "version": "6.2.3.3"
            },
            {
              "status": "affected",
              "version": "6.2.3.4"
            },
            {
              "status": "affected",
              "version": "6.2.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.3.6"
            },
            {
              "status": "affected",
              "version": "6.2.3.7"
            },
            {
              "status": "affected",
              "version": "6.2.3.8"
            },
            {
              "status": "affected",
              "version": "6.2.3.10"
            },
            {
              "status": "affected",
              "version": "6.2.3.11"
            },
            {
              "status": "affected",
              "version": "6.2.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3.12"
            },
            {
              "status": "affected",
              "version": "6.2.3.13"
            },
            {
              "status": "affected",
              "version": "6.2.3.14"
            },
            {
              "status": "affected",
              "version": "6.2.3.15"
            },
            {
              "status": "affected",
              "version": "6.2.3.16"
            },
            {
              "status": "affected",
              "version": "6.2.3.17"
            },
            {
              "status": "affected",
              "version": "6.2.3.18"
            },
            {
              "status": "affected",
              "version": "6.6.0"
            },
            {
              "status": "affected",
              "version": "6.6.0.1"
            },
            {
              "status": "affected",
              "version": "6.6.1"
            },
            {
              "status": "affected",
              "version": "6.6.3"
            },
            {
              "status": "affected",
              "version": "6.6.4"
            },
            {
              "status": "affected",
              "version": "6.6.5"
            },
            {
              "status": "affected",
              "version": "6.6.5.1"
            },
            {
              "status": "affected",
              "version": "6.6.5.2"
            },
            {
              "status": "affected",
              "version": "6.6.7"
            },
            {
              "status": "affected",
              "version": "6.6.7.1"
            },
            {
              "status": "affected",
              "version": "6.6.7.2"
            },
            {
              "status": "affected",
              "version": "6.4.0"
            },
            {
              "status": "affected",
              "version": "6.4.0.1"
            },
            {
              "status": "affected",
              "version": "6.4.0.3"
            },
            {
              "status": "affected",
              "version": "6.4.0.2"
            },
            {
              "status": "affected",
              "version": "6.4.0.4"
            },
            {
              "status": "affected",
              "version": "6.4.0.5"
            },
            {
              "status": "affected",
              "version": "6.4.0.6"
            },
            {
              "status": "affected",
              "version": "6.4.0.7"
            },
            {
              "status": "affected",
              "version": "6.4.0.8"
            },
            {
              "status": "affected",
              "version": "6.4.0.9"
            },
            {
              "status": "affected",
              "version": "6.4.0.10"
            },
            {
              "status": "affected",
              "version": "6.4.0.11"
            },
            {
              "status": "affected",
              "version": "6.4.0.12"
            },
            {
              "status": "affected",
              "version": "6.4.0.13"
            },
            {
              "status": "affected",
              "version": "6.4.0.14"
            },
            {
              "status": "affected",
              "version": "6.4.0.15"
            },
            {
              "status": "affected",
              "version": "6.4.0.16"
            },
            {
              "status": "affected",
              "version": "6.4.0.17"
            },
            {
              "status": "affected",
              "version": "6.4.0.18"
            },
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.0.2.1"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.6"
            },
            {
              "status": "affected",
              "version": "7.0.6.1"
            },
            {
              "status": "affected",
              "version": "7.0.6.2"
            },
            {
              "status": "affected",
              "version": "7.0.6.3"
            },
            {
              "status": "affected",
              "version": "7.0.7"
            },
            {
              "status": "affected",
              "version": "7.0.8"
            },
            {
              "status": "affected",
              "version": "7.0.8.1"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "7.1.0.1"
            },
            {
              "status": "affected",
              "version": "7.1.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.2.0.1"
            },
            {
              "status": "affected",
              "version": "7.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.2.4"
            },
            {
              "status": "affected",
              "version": "7.2.4.1"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "7.2.5.1"
            },
            {
              "status": "affected",
              "version": "7.2.6"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.2.5.2"
            },
            {
              "status": "affected",
              "version": "7.2.8"
            },
            {
              "status": "affected",
              "version": "7.2.8.1"
            },
            {
              "status": "affected",
              "version": "7.2.9"
            },
            {
              "status": "affected",
              "version": "7.2.10"
            },
            {
              "status": "affected",
              "version": "7.2.10.2"
            },
            {
              "status": "affected",
              "version": "7.3.0"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.2"
            },
            {
              "status": "affected",
              "version": "7.4.0"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.1"
            },
            {
              "status": "affected",
              "version": "7.4.2"
            },
            {
              "status": "affected",
              "version": "7.4.2.1"
            },
            {
              "status": "affected",
              "version": "7.4.2.2"
            },
            {
              "status": "affected",
              "version": "7.4.2.3"
            },
            {
              "status": "affected",
              "version": "7.4.2.4"
            },
            {
              "status": "affected",
              "version": "7.6.0"
            },
            {
              "status": "affected",
              "version": "7.6.1"
            },
            {
              "status": "affected",
              "version": "7.6.2"
            },
            {
              "status": "affected",
              "version": "7.6.2.1"
            },
            {
              "status": "affected",
              "version": "7.7.0"
            },
            {
              "status": "affected",
              "version": "7.7.10"
            },
            {
              "status": "affected",
              "version": "7.7.10.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. \r\n\r This vulnerability exists because the contents of a backup file are improperly sanitized at restore time. An attacker could exploit this vulnerability by restoring a crafted backup file to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system as root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-04T17:23:09.191Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-asaftd-cmd-inj-ZJV8Wysm",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm"
        }
      ],
      "source": {
        "advisory": "cisco-sa-asaftd-cmd-inj-ZJV8Wysm",
        "defects": [
          "CSCwi90040",
          "CSCwq32051"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20358",
    "datePublished": "2024-04-24T19:38:23.689Z",
    "dateReserved": "2023-11-08T15:08:07.650Z",
    "dateUpdated": "2026-03-04T17:23:09.191Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-20356 (GCVE-0-2024-20356)

Vulnerability from cvelistv5 – Published: 2024-04-24 19:40 – Updated: 2024-08-01 21:59

Summary

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.

Severity

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

4 products

Vendor	Product	Version
Cisco	Cisco Unified Computing System (Standalone)	Affected: 3.0(1c) Affected: 3.0(1d) Affected: 3.0(3a) Affected: 3.0(3b) Affected: 3.0(3e) Affected: 3.0(4a) Affected: 3.0(4d) Affected: 3.0(4e) Affected: 3.0(4i) Affected: 3.0(4j) Affected: 3.0(4k) Affected: 3.0(4l) Affected: 3.0(4m) Affected: 3.0(4n) Affected: 3.0(4o) Affected: 3.0(4p) Affected: 3.0(4q) Affected: 3.0(4r) Affected: 3.0(4s) Affected: 3.1(1d) Affected: 3.1(2b) Affected: 3.1(2c) Affected: 3.1(2d) Affected: 3.1(2e) Affected: 3.1(2g) Affected: 3.1(2i) Affected: 3.1(3a) Affected: 3.1(3b) Affected: 3.1(3c) Affected: 3.1(3d) Affected: 3.1(3g) Affected: 3.1(3h) Affected: 3.1(3i) Affected: 3.1(3j) Affected: 3.1(3k) Affected: 4.0(1.240) Affected: 4.0(1a) Affected: 4.0(1b) Affected: 4.0(1c) Affected: 4.0(1d) Affected: 4.0(1e) Affected: 4.0(1g) Affected: 4.0(1h) Affected: 4.0(2c) Affected: 4.0(2d) Affected: 4.0(2f) Affected: 4.0(2g) Affected: 4.0(2h) Affected: 4.0(2i) Affected: 4.0(2k) Affected: 4.0(2l) Affected: 4.0(2m) Affected: 4.0(2n) Affected: 4.0(4b) Affected: 4.0(4c) Affected: 4.0(4d) Affected: 4.0(4e) Affected: 4.0(4f) Affected: 4.0(4h) Affected: 4.0(4i) Affected: 4.0(4j) Affected: 4.0(4k) Affected: 4.0(4l) Affected: 4.0(4m) Affected: 4.0(2o) Affected: 4.0(2p) Affected: 4.0(4n) Affected: 4.0(2q) Affected: 4.0(2r) Affected: 4.1(1c) Affected: 4.1(1d) Affected: 4.1(1f) Affected: 4.1(1g) Affected: 4.1(2a) Affected: 4.1(1h) Affected: 4.1(2b) Affected: 4.1(2f) Affected: 4.1(2e) Affected: 4.1(3b) Affected: 4.1(2d) Affected: 4.1(3c) Affected: 4.1(3d) Affected: 4.1(2g) Affected: 4.1(3f) Affected: 4.1(2h) Affected: 4.1(2j) Affected: 4.1(2k) Affected: 4.1(2l) Affected: 4.1(3g) Affected: 4.1(3h) Affected: 4.1(3i) Affected: 4.1(3l) Affected: 4.1(2m) Affected: 4.1(3m) Affected: 4.2(1a) Affected: 4.2(1b) Affected: 4.2(1c) Affected: 4.2(1e) Affected: 4.2(1f) Affected: 4.2(1g) Affected: 4.2(1i) Affected: 4.2(1j) Affected: 4.2(2a) Affected: 4.2(2f) Affected: 4.2(2g) Affected: 4.2(3b) Affected: 4.2(3d) Affected: 4.2(3e) Affected: 4.2(3g) Affected: 4.2(3h) Affected: 4.2(3i) Affected: 4.2(3j) Affected: 4.3(1.230097) Affected: 4.3(1.230124) Affected: 4.3(1.230138) Affected: 4.3(2.230207) Affected: 4.3(2.230270) Affected: 4.3(2.240002) Affected: 4.3(3.240022)
Cisco	Cisco Unified Computing System E-Series Software (UCSE)	Affected: 2.1.0 Affected: 2.4.0 Affected: 2.4.1 Affected: 2.4.2 Affected: 3.2.1 Affected: 3.2.2 Affected: 3.2.3 Affected: 3.2.4 Affected: 3.2.6 Affected: 3.2.7 Affected: 3.2.10 Affected: 3.2.11.1 Affected: 3.2.8 Affected: 3.2.11.3 Affected: 3.2.11.5 Affected: 3.2.12.2 Affected: 3.2.13.6 Affected: 3.2.14 Affected: 3.2.15 Affected: 3.1.1 Affected: 3.1.2 Affected: 3.1.3 Affected: 3.1.4 Affected: 3.1.5 Affected: 3.1.0 Affected: 3.0.1 Affected: 3.0.2 Affected: 2.3.1 Affected: 2.3.2 Affected: 2.3.3 Affected: 2.3.5 Affected: 2.2.1 Affected: 2.2.2 Affected: 2.0.0 Affected: 4.11.1 Affected: 4.12.1
cisco	unified_computing_system	Affected: - cpe:2.3:h:cisco:unified_computing_system:-:::::::*
cisco	unified_computing_system_e-series	Affected: - cpe:2.3:a:cisco:unified_computing_system_e-series:4.12.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:cisco:unified_computing_system:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "unified_computing_system",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "-"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:unified_computing_system_e-series:4.12.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "unified_computing_system_e-series",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "-"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20356",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-25T17:53:52.218954Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:40:42.092Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:41.754Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-cimc-cmd-inj-bLuPcb",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-bLuPcb"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Unified Computing System (Standalone)",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.0(1c)"
            },
            {
              "status": "affected",
              "version": "3.0(1d)"
            },
            {
              "status": "affected",
              "version": "3.0(3a)"
            },
            {
              "status": "affected",
              "version": "3.0(3b)"
            },
            {
              "status": "affected",
              "version": "3.0(3e)"
            },
            {
              "status": "affected",
              "version": "3.0(4a)"
            },
            {
              "status": "affected",
              "version": "3.0(4d)"
            },
            {
              "status": "affected",
              "version": "3.0(4e)"
            },
            {
              "status": "affected",
              "version": "3.0(4i)"
            },
            {
              "status": "affected",
              "version": "3.0(4j)"
            },
            {
              "status": "affected",
              "version": "3.0(4k)"
            },
            {
              "status": "affected",
              "version": "3.0(4l)"
            },
            {
              "status": "affected",
              "version": "3.0(4m)"
            },
            {
              "status": "affected",
              "version": "3.0(4n)"
            },
            {
              "status": "affected",
              "version": "3.0(4o)"
            },
            {
              "status": "affected",
              "version": "3.0(4p)"
            },
            {
              "status": "affected",
              "version": "3.0(4q)"
            },
            {
              "status": "affected",
              "version": "3.0(4r)"
            },
            {
              "status": "affected",
              "version": "3.0(4s)"
            },
            {
              "status": "affected",
              "version": "3.1(1d)"
            },
            {
              "status": "affected",
              "version": "3.1(2b)"
            },
            {
              "status": "affected",
              "version": "3.1(2c)"
            },
            {
              "status": "affected",
              "version": "3.1(2d)"
            },
            {
              "status": "affected",
              "version": "3.1(2e)"
            },
            {
              "status": "affected",
              "version": "3.1(2g)"
            },
            {
              "status": "affected",
              "version": "3.1(2i)"
            },
            {
              "status": "affected",
              "version": "3.1(3a)"
            },
            {
              "status": "affected",
              "version": "3.1(3b)"
            },
            {
              "status": "affected",
              "version": "3.1(3c)"
            },
            {
              "status": "affected",
              "version": "3.1(3d)"
            },
            {
              "status": "affected",
              "version": "3.1(3g)"
            },
            {
              "status": "affected",
              "version": "3.1(3h)"
            },
            {
              "status": "affected",
              "version": "3.1(3i)"
            },
            {
              "status": "affected",
              "version": "3.1(3j)"
            },
            {
              "status": "affected",
              "version": "3.1(3k)"
            },
            {
              "status": "affected",
              "version": "4.0(1.240)"
            },
            {
              "status": "affected",
              "version": "4.0(1a)"
            },
            {
              "status": "affected",
              "version": "4.0(1b)"
            },
            {
              "status": "affected",
              "version": "4.0(1c)"
            },
            {
              "status": "affected",
              "version": "4.0(1d)"
            },
            {
              "status": "affected",
              "version": "4.0(1e)"
            },
            {
              "status": "affected",
              "version": "4.0(1g)"
            },
            {
              "status": "affected",
              "version": "4.0(1h)"
            },
            {
              "status": "affected",
              "version": "4.0(2c)"
            },
            {
              "status": "affected",
              "version": "4.0(2d)"
            },
            {
              "status": "affected",
              "version": "4.0(2f)"
            },
            {
              "status": "affected",
              "version": "4.0(2g)"
            },
            {
              "status": "affected",
              "version": "4.0(2h)"
            },
            {
              "status": "affected",
              "version": "4.0(2i)"
            },
            {
              "status": "affected",
              "version": "4.0(2k)"
            },
            {
              "status": "affected",
              "version": "4.0(2l)"
            },
            {
              "status": "affected",
              "version": "4.0(2m)"
            },
            {
              "status": "affected",
              "version": "4.0(2n)"
            },
            {
              "status": "affected",
              "version": "4.0(4b)"
            },
            {
              "status": "affected",
              "version": "4.0(4c)"
            },
            {
              "status": "affected",
              "version": "4.0(4d)"
            },
            {
              "status": "affected",
              "version": "4.0(4e)"
            },
            {
              "status": "affected",
              "version": "4.0(4f)"
            },
            {
              "status": "affected",
              "version": "4.0(4h)"
            },
            {
              "status": "affected",
              "version": "4.0(4i)"
            },
            {
              "status": "affected",
              "version": "4.0(4j)"
            },
            {
              "status": "affected",
              "version": "4.0(4k)"
            },
            {
              "status": "affected",
              "version": "4.0(4l)"
            },
            {
              "status": "affected",
              "version": "4.0(4m)"
            },
            {
              "status": "affected",
              "version": "4.0(2o)"
            },
            {
              "status": "affected",
              "version": "4.0(2p)"
            },
            {
              "status": "affected",
              "version": "4.0(4n)"
            },
            {
              "status": "affected",
              "version": "4.0(2q)"
            },
            {
              "status": "affected",
              "version": "4.0(2r)"
            },
            {
              "status": "affected",
              "version": "4.1(1c)"
            },
            {
              "status": "affected",
              "version": "4.1(1d)"
            },
            {
              "status": "affected",
              "version": "4.1(1f)"
            },
            {
              "status": "affected",
              "version": "4.1(1g)"
            },
            {
              "status": "affected",
              "version": "4.1(2a)"
            },
            {
              "status": "affected",
              "version": "4.1(1h)"
            },
            {
              "status": "affected",
              "version": "4.1(2b)"
            },
            {
              "status": "affected",
              "version": "4.1(2f)"
            },
            {
              "status": "affected",
              "version": "4.1(2e)"
            },
            {
              "status": "affected",
              "version": "4.1(3b)"
            },
            {
              "status": "affected",
              "version": "4.1(2d)"
            },
            {
              "status": "affected",
              "version": "4.1(3c)"
            },
            {
              "status": "affected",
              "version": "4.1(3d)"
            },
            {
              "status": "affected",
              "version": "4.1(2g)"
            },
            {
              "status": "affected",
              "version": "4.1(3f)"
            },
            {
              "status": "affected",
              "version": "4.1(2h)"
            },
            {
              "status": "affected",
              "version": "4.1(2j)"
            },
            {
              "status": "affected",
              "version": "4.1(2k)"
            },
            {
              "status": "affected",
              "version": "4.1(2l)"
            },
            {
              "status": "affected",
              "version": "4.1(3g)"
            },
            {
              "status": "affected",
              "version": "4.1(3h)"
            },
            {
              "status": "affected",
              "version": "4.1(3i)"
            },
            {
              "status": "affected",
              "version": "4.1(3l)"
            },
            {
              "status": "affected",
              "version": "4.1(2m)"
            },
            {
              "status": "affected",
              "version": "4.1(3m)"
            },
            {
              "status": "affected",
              "version": "4.2(1a)"
            },
            {
              "status": "affected",
              "version": "4.2(1b)"
            },
            {
              "status": "affected",
              "version": "4.2(1c)"
            },
            {
              "status": "affected",
              "version": "4.2(1e)"
            },
            {
              "status": "affected",
              "version": "4.2(1f)"
            },
            {
              "status": "affected",
              "version": "4.2(1g)"
            },
            {
              "status": "affected",
              "version": "4.2(1i)"
            },
            {
              "status": "affected",
              "version": "4.2(1j)"
            },
            {
              "status": "affected",
              "version": "4.2(2a)"
            },
            {
              "status": "affected",
              "version": "4.2(2f)"
            },
            {
              "status": "affected",
              "version": "4.2(2g)"
            },
            {
              "status": "affected",
              "version": "4.2(3b)"
            },
            {
              "status": "affected",
              "version": "4.2(3d)"
            },
            {
              "status": "affected",
              "version": "4.2(3e)"
            },
            {
              "status": "affected",
              "version": "4.2(3g)"
            },
            {
              "status": "affected",
              "version": "4.2(3h)"
            },
            {
              "status": "affected",
              "version": "4.2(3i)"
            },
            {
              "status": "affected",
              "version": "4.2(3j)"
            },
            {
              "status": "affected",
              "version": "4.3(1.230097)"
            },
            {
              "status": "affected",
              "version": "4.3(1.230124)"
            },
            {
              "status": "affected",
              "version": "4.3(1.230138)"
            },
            {
              "status": "affected",
              "version": "4.3(2.230207)"
            },
            {
              "status": "affected",
              "version": "4.3(2.230270)"
            },
            {
              "status": "affected",
              "version": "4.3(2.240002)"
            },
            {
              "status": "affected",
              "version": "4.3(3.240022)"
            }
          ]
        },
        {
          "product": "Cisco Unified Computing System E-Series Software (UCSE)",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.1.0"
            },
            {
              "status": "affected",
              "version": "2.4.0"
            },
            {
              "status": "affected",
              "version": "2.4.1"
            },
            {
              "status": "affected",
              "version": "2.4.2"
            },
            {
              "status": "affected",
              "version": "3.2.1"
            },
            {
              "status": "affected",
              "version": "3.2.2"
            },
            {
              "status": "affected",
              "version": "3.2.3"
            },
            {
              "status": "affected",
              "version": "3.2.4"
            },
            {
              "status": "affected",
              "version": "3.2.6"
            },
            {
              "status": "affected",
              "version": "3.2.7"
            },
            {
              "status": "affected",
              "version": "3.2.10"
            },
            {
              "status": "affected",
              "version": "3.2.11.1"
            },
            {
              "status": "affected",
              "version": "3.2.8"
            },
            {
              "status": "affected",
              "version": "3.2.11.3"
            },
            {
              "status": "affected",
              "version": "3.2.11.5"
            },
            {
              "status": "affected",
              "version": "3.2.12.2"
            },
            {
              "status": "affected",
              "version": "3.2.13.6"
            },
            {
              "status": "affected",
              "version": "3.2.14"
            },
            {
              "status": "affected",
              "version": "3.2.15"
            },
            {
              "status": "affected",
              "version": "3.1.1"
            },
            {
              "status": "affected",
              "version": "3.1.2"
            },
            {
              "status": "affected",
              "version": "3.1.3"
            },
            {
              "status": "affected",
              "version": "3.1.4"
            },
            {
              "status": "affected",
              "version": "3.1.5"
            },
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "2.3.1"
            },
            {
              "status": "affected",
              "version": "2.3.2"
            },
            {
              "status": "affected",
              "version": "2.3.3"
            },
            {
              "status": "affected",
              "version": "2.3.5"
            },
            {
              "status": "affected",
              "version": "2.2.1"
            },
            {
              "status": "affected",
              "version": "2.2.2"
            },
            {
              "status": "affected",
              "version": "2.0.0"
            },
            {
              "status": "affected",
              "version": "4.11.1"
            },
            {
              "status": "affected",
              "version": "4.12.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerability described in this advisory.\r\n\r\nThe Cisco PSIRT is not aware of any malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-24T19:40:33.312Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-cimc-cmd-inj-bLuPcb",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-bLuPcb"
        }
      ],
      "source": {
        "advisory": "cisco-sa-cimc-cmd-inj-bLuPcb",
        "defects": [
          "CSCwi43005",
          "CSCwj41082",
          "CSCwi43001",
          "CSCwi42996"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20356",
    "datePublished": "2024-04-24T19:40:33.312Z",
    "dateReserved": "2023-11-08T15:08:07.648Z",
    "dateUpdated": "2024-08-01T21:59:41.754Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20335 (GCVE-0-2024-20335)

Vulnerability from cvelistv5 – Published: 2024-03-06 16:30 – Updated: 2024-08-01 21:59

Summary

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid administrative credentials for the device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco Business Wireless Access Point Software	Affected: 1.0.0.13 Affected: 1.0.0.16 Affected: 1.0.0.3 Affected: 1.0.0.4 Affected: 1.0.0.5 Affected: 1.0.0.7 Affected: 1.0.1.2 Affected: 1.0.1.3 Affected: 1.0.1.5 Affected: 1.0.1.6 Affected: 1.0.1.7 Affected: 1.0.2.0 Affected: 1.0.3.1 Affected: 1.0.4.4 Affected: 1.0.4.3 Affected: 1.0.1.10 Affected: 1.0.5.0 Affected: 1.0.0.10 Affected: 1.0.0.12 Affected: 1.0.0.14 Affected: 1.0.0.15 Affected: 1.0.0.17 Affected: 1.0.0.9 Affected: 1.0.1.11 Affected: 1.0.1.12 Affected: 1.0.1.9 Affected: 1.0.2.6 Affected: 1.1.0.5 Affected: 1.1.0.7 Affected: 1.1.0.9 Affected: 1.1.1.0 Affected: 1.1.2.4 Affected: 1.1.4.6 Affected: 1.1.3.2 Affected: 1.1.4.0 Affected: 1.1.0.3 Affected: 1.1.0.4 Affected: 1.1.0.6 Affected: 1.1.2.3 Affected: 1.2.0.2 Affected: 1.2.0.3 Affected: 1.2.1.3 Affected: 1.3.0.3 Affected: 1.3.0.4 Affected: 1.3.0.6 Affected: 1.3.0.7
cisco	business_wireless_access_point_software	Affected: 1.0.0.10 Affected: 1.0.0.12 Affected: 1.0.0.13 Affected: 1.0.0.14 Affected: 1.0.0.15 Affected: 1.0.0.16 Affected: 1.0.0.17 Affected: 1.0.0.3 Affected: 1.0.0.4 Affected: 1.0.0.5 Affected: 1.0.0.7 Affected: 1.0.0.9 Affected: 1.0.1.10 Affected: 1.0.1.11 Affected: 1.0.1.12 Affected: 1.0.1.2 Affected: 1.0.1.3 Affected: 1.0.1.5 Affected: 1.0.1.6 Affected: 1.0.1.7 Affected: 1.0.1.9 Affected: 1.0.2.0 Affected: 1.0.2.6 Affected: 1.0.3.1 Affected: 1.0.4.3 Affected: 1.0.4.4 Affected: 1.0.5.0 Affected: 1.1.0.3 Affected: 1.1.0.4 Affected: 1.1.0.5 Affected: 1.1.0.6 Affected: 1.1.0.7 Affected: 1.1.0.9 Affected: 1.1.1.0 Affected: 1.1.2.3 Affected: 1.1.2.4 Affected: 1.1.3.2 Affected: 1.1.4.0 Affected: 1.1.4.6 Affected: 1.2.0.2 Affected: 1.2.0.3 Affected: 1.2.1.3 Affected: 1.3.0.3 Affected: 1.3.0.4 Affected: 1.3.0.6 Affected: 1.3.0.7 cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.10:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.12:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.13:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.14:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.15:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.16:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.17:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.4:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.5:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.7:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.9:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.10:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.11:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.12:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.2:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.5:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.6:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.7:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.9:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.2.0:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.2.6:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.3.1:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.4.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.4.4:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.5.0:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.4:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.5:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.6:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.7:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.9:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.1.0:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.2.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.2.4:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.3.2:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.4.0:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.4.6:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.0.2:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.0.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.1.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.3:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.4:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.6:::::::* cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.7:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.10:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.12:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.13:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.14:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.15:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.16:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.17:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.5:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.7:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.9:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.10:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.11:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.12:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.2:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.5:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.7:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.9:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.2.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.2.6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.3.1:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.4.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.4.4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.5.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.5:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.7:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.9:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.1.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.2.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.2.4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.3.2:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.4.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.4.6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.0.2:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.1.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "business_wireless_access_point_software",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "1.0.0.10"
              },
              {
                "status": "affected",
                "version": "1.0.0.12"
              },
              {
                "status": "affected",
                "version": "1.0.0.13"
              },
              {
                "status": "affected",
                "version": "1.0.0.14"
              },
              {
                "status": "affected",
                "version": "1.0.0.15"
              },
              {
                "status": "affected",
                "version": "1.0.0.16"
              },
              {
                "status": "affected",
                "version": "1.0.0.17"
              },
              {
                "status": "affected",
                "version": "1.0.0.3"
              },
              {
                "status": "affected",
                "version": "1.0.0.4"
              },
              {
                "status": "affected",
                "version": "1.0.0.5"
              },
              {
                "status": "affected",
                "version": "1.0.0.7"
              },
              {
                "status": "affected",
                "version": "1.0.0.9"
              },
              {
                "status": "affected",
                "version": "1.0.1.10"
              },
              {
                "status": "affected",
                "version": "1.0.1.11"
              },
              {
                "status": "affected",
                "version": "1.0.1.12"
              },
              {
                "status": "affected",
                "version": "1.0.1.2"
              },
              {
                "status": "affected",
                "version": "1.0.1.3"
              },
              {
                "status": "affected",
                "version": "1.0.1.5"
              },
              {
                "status": "affected",
                "version": "1.0.1.6"
              },
              {
                "status": "affected",
                "version": "1.0.1.7"
              },
              {
                "status": "affected",
                "version": "1.0.1.9"
              },
              {
                "status": "affected",
                "version": "1.0.2.0"
              },
              {
                "status": "affected",
                "version": "1.0.2.6"
              },
              {
                "status": "affected",
                "version": "1.0.3.1"
              },
              {
                "status": "affected",
                "version": "1.0.4.3"
              },
              {
                "status": "affected",
                "version": "1.0.4.4"
              },
              {
                "status": "affected",
                "version": "1.0.5.0"
              },
              {
                "status": "affected",
                "version": "1.1.0.3"
              },
              {
                "status": "affected",
                "version": "1.1.0.4"
              },
              {
                "status": "affected",
                "version": "1.1.0.5"
              },
              {
                "status": "affected",
                "version": "1.1.0.6"
              },
              {
                "status": "affected",
                "version": "1.1.0.7"
              },
              {
                "status": "affected",
                "version": "1.1.0.9"
              },
              {
                "status": "affected",
                "version": "1.1.1.0"
              },
              {
                "status": "affected",
                "version": "1.1.2.3"
              },
              {
                "status": "affected",
                "version": "1.1.2.4"
              },
              {
                "status": "affected",
                "version": "1.1.3.2"
              },
              {
                "status": "affected",
                "version": "1.1.4.0"
              },
              {
                "status": "affected",
                "version": "1.1.4.6"
              },
              {
                "status": "affected",
                "version": "1.2.0.2"
              },
              {
                "status": "affected",
                "version": "1.2.0.3"
              },
              {
                "status": "affected",
                "version": "1.2.1.3"
              },
              {
                "status": "affected",
                "version": "1.3.0.3"
              },
              {
                "status": "affected",
                "version": "1.3.0.4"
              },
              {
                "status": "affected",
                "version": "1.3.0.6"
              },
              {
                "status": "affected",
                "version": "1.3.0.7"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20335",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-07T14:42:02.782698Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-26T15:07:27.344Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:41.400Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-sb-wap-multi-85G83CRB",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-85G83CRB"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Business Wireless Access Point Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0.13"
            },
            {
              "status": "affected",
              "version": "1.0.0.16"
            },
            {
              "status": "affected",
              "version": "1.0.0.3"
            },
            {
              "status": "affected",
              "version": "1.0.0.4"
            },
            {
              "status": "affected",
              "version": "1.0.0.5"
            },
            {
              "status": "affected",
              "version": "1.0.0.7"
            },
            {
              "status": "affected",
              "version": "1.0.1.2"
            },
            {
              "status": "affected",
              "version": "1.0.1.3"
            },
            {
              "status": "affected",
              "version": "1.0.1.5"
            },
            {
              "status": "affected",
              "version": "1.0.1.6"
            },
            {
              "status": "affected",
              "version": "1.0.1.7"
            },
            {
              "status": "affected",
              "version": "1.0.2.0"
            },
            {
              "status": "affected",
              "version": "1.0.3.1"
            },
            {
              "status": "affected",
              "version": "1.0.4.4"
            },
            {
              "status": "affected",
              "version": "1.0.4.3"
            },
            {
              "status": "affected",
              "version": "1.0.1.10"
            },
            {
              "status": "affected",
              "version": "1.0.5.0"
            },
            {
              "status": "affected",
              "version": "1.0.0.10"
            },
            {
              "status": "affected",
              "version": "1.0.0.12"
            },
            {
              "status": "affected",
              "version": "1.0.0.14"
            },
            {
              "status": "affected",
              "version": "1.0.0.15"
            },
            {
              "status": "affected",
              "version": "1.0.0.17"
            },
            {
              "status": "affected",
              "version": "1.0.0.9"
            },
            {
              "status": "affected",
              "version": "1.0.1.11"
            },
            {
              "status": "affected",
              "version": "1.0.1.12"
            },
            {
              "status": "affected",
              "version": "1.0.1.9"
            },
            {
              "status": "affected",
              "version": "1.0.2.6"
            },
            {
              "status": "affected",
              "version": "1.1.0.5"
            },
            {
              "status": "affected",
              "version": "1.1.0.7"
            },
            {
              "status": "affected",
              "version": "1.1.0.9"
            },
            {
              "status": "affected",
              "version": "1.1.1.0"
            },
            {
              "status": "affected",
              "version": "1.1.2.4"
            },
            {
              "status": "affected",
              "version": "1.1.4.6"
            },
            {
              "status": "affected",
              "version": "1.1.3.2"
            },
            {
              "status": "affected",
              "version": "1.1.4.0"
            },
            {
              "status": "affected",
              "version": "1.1.0.3"
            },
            {
              "status": "affected",
              "version": "1.1.0.4"
            },
            {
              "status": "affected",
              "version": "1.1.0.6"
            },
            {
              "status": "affected",
              "version": "1.1.2.3"
            },
            {
              "status": "affected",
              "version": "1.2.0.2"
            },
            {
              "status": "affected",
              "version": "1.2.0.3"
            },
            {
              "status": "affected",
              "version": "1.2.1.3"
            },
            {
              "status": "affected",
              "version": "1.3.0.3"
            },
            {
              "status": "affected",
              "version": "1.3.0.4"
            },
            {
              "status": "affected",
              "version": "1.3.0.6"
            },
            {
              "status": "affected",
              "version": "1.3.0.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid administrative credentials for the device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-06T17:06:13.554Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-sb-wap-multi-85G83CRB",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-85G83CRB"
        }
      ],
      "source": {
        "advisory": "cisco-sa-sb-wap-multi-85G83CRB",
        "defects": [
          "CSCwi78277",
          "CSCwi83948",
          "CSCwi78254",
          "CSCwi78271"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20335",
    "datePublished": "2024-03-06T16:30:39.235Z",
    "dateReserved": "2023-11-08T15:08:07.642Z",
    "dateUpdated": "2024-08-01T21:59:41.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20328 (GCVE-0-2024-20328)

Vulnerability from cvelistv5 – Published: 2024-03-01 20:48 – Updated: 2025-11-04 18:22

Title

ClamAV VirusEvent File Processing Command Injection Vulnerability

Summary

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

cisco

References

2 references

URL	Tags
https://blog.clamav.net/2023/11/clamav-130-122-10…
https://lists.fedoraproject.org/archives/list/pac…

Impacted products

3 products

Vendor	Product	Version
Cisco	ClamAV	Affected: 1.2.0 Affected: 1.2.1
cisco	clamav	Affected: 1.2.0 cpe:2.3:a:cisco:clamav:1.2.0:::::::*
cisco	clamav	Affected: 1.2.1 cpe:2.3:a:cisco:clamav:1.2.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:clamav:1.2.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clamav",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "1.2.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:clamav:1.2.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clamav",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "1.2.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20328",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-05T15:40:24.549668Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-23T20:45:50.903Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T18:22:37.791Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://blog.clamav.net/2023/11/clamav-130-122-105-released.html"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FXZYVDNV66RNMNVJOHAJAYRZV4U64CQ/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ClamAV",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "1.2.0"
            },
            {
              "status": "affected",
              "version": "1.2.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands.\nClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\n\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-01T20:48:15.328Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "url": "https://blog.clamav.net/2023/11/clamav-130-122-105-released.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV VirusEvent File Processing Command Injection Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20328",
    "datePublished": "2024-03-01T20:48:15.328Z",
    "dateReserved": "2023-11-08T15:08:07.641Z",
    "dateUpdated": "2025-11-04T18:22:37.791Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-20326 (GCVE-0-2024-20326)

Vulnerability from cvelistv5 – Published: 2024-05-16 14:08 – Updated: 2024-08-01 21:59

Summary

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system. This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

cisco

References

2 references

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

23 products

Vendor	Product	Version
Cisco	Cisco ConfD	Affected: 7.3.5 Affected: 7.3.5.2 Affected: 7.3.5.1 Affected: 7.3.6 Affected: 7.4.5.3 Affected: 7.4.5.2 Affected: 7.4.6 Affected: 7.4.5.1 Affected: 7.4.8 Affected: 7.4.5 Affected: 7.4.7 Affected: 7.5.10 Affected: 7.5.4 Affected: 7.5.3.2 Affected: 7.5.3.1 Affected: 7.5.4.2 Affected: 7.5.4.1 Affected: 7.5.6.2 Affected: 7.5.5 Affected: 7.5.8 Affected: 7.5.9 Affected: 7.5.6 Affected: 7.5.4.3 Affected: 7.5.6.1 Affected: 7.5.7 Affected: 7.5.5.1 Affected: 7.5.3 Affected: 7.7 Affected: 7.6 Affected: 7.8 Affected: 7.6.12 Affected: 7.6.11 Affected: 7.6.9 Affected: 7.6.5 Affected: 7.6.1 Affected: 7.6.14.1 Affected: 7.6.8.1 Affected: 7.6.2 Affected: 7.6.4 Affected: 7.6.8 Affected: 7.6.7 Affected: 7.6.10 Affected: 7.6.3 Affected: 7.6.13 Affected: 7.6.14 Affected: 7.6.6 Affected: 7.7.7 Affected: 7.7.13 Affected: 7.7.4 Affected: 7.7.8 Affected: 7.7.9 Affected: 7.7.12 Affected: 7.7.2 Affected: 7.7.5 Affected: 7.7.5.1 Affected: 7.7.6 Affected: 7.7.10 Affected: 7.7.1 Affected: 7.7.3 Affected: 7.7.11 Affected: 7.8.8 Affected: 7.8.4 Affected: 7.8.2 Affected: 7.8.7 Affected: 7.8.9 Affected: 7.8.11 Affected: 7.8.5 Affected: 7.8.1 Affected: 7.8.3 Affected: 7.8.6 Affected: 7.8.10 Affected: 8.0.4 Affected: 8.0.8 Affected: 8.0.5 Affected: 8.0.7 Affected: 8.0.2 Affected: 8.0.1 Affected: 8.0.3 Affected: 8.0.6 Affected: 8.1 Affected: 8.0 Affected: 8.1.2 Affected: 8.1.4 Affected: 8.1.1 Affected: 8.1.3
Cisco	Cisco ConfD Basic	Affected: 8.0.1 Affected: 8.0.6 Affected: 8.0.4 Affected: 8.0.2 Affected: 8.0.3 Affected: 8.0.5 Affected: 8.0.10 Affected: 8.0.11 Affected: 8.0.7 Affected: 8.0.8 Affected: 8.0.9 Affected: 7.8.3 Affected: 8.0
Cisco	Cisco Network Services Orchestrator	Affected: N/A
cisco	confd	Affected: 7.5.3 , < 7.5.10.2 (custom) cpe:2.3:a:cisco:confd:7.5.3:::::::*
cisco	confd	Affected: 7.6 , < 7.6.14.2 (custom) cpe:2.3:a:cisco:confd:7.6:::::::*
cisco	confd	Affected: 7.7 , < 7.7.15 (custom) cpe:2.3:a:cisco:confd:7.7:::::::*
cisco	confd	Affected: 7.8 , < 7.8.13.1 (custom) cpe:2.3:a:cisco:confd:7.8:::::::*
cisco	confd	Affected: 8.0 , < 8.0.12 (custom) cpe:2.3:a:cisco:confd:8.0:::::::*
cisco	confd	Affected: 7.1.7 cpe:2.3:a:cisco:confd:7.1.7:::::::*
cisco	confd	Affected: 7.2.7 cpe:2.3:a:cisco:confd:7.2.7:::::::*
cisco	confd	Affected: 7.3.7 cpe:2.3:a:cisco:confd:7.3.7:::::::*
cisco	confd	Affected: 7.4.7 cpe:2.3:a:cisco:confd:7.4.7:::::::*
cisco	network_services_orchestrator	Affected: 5.1.7 cpe:2.3:a:cisco:network_services_orchestrator:5.1.7:::::::*
cisco	network_services_orchestrator	Affected: 5.2.7 cpe:2.3:a:cisco:network_services_orchestrator:5.2.7:::::::*
cisco	network_services_orchestrator	Affected: 5.3.5 cpe:2.3:a:cisco:network_services_orchestrator:5.3.5:::::::*
cisco	network_services_orchestrator	Affected: 5.4.5 cpe:2.3:a:cisco:network_services_orchestrator:5.4.5:::::::*
cisco	network_services_orchestrator	Affected: 5.5.3 , < 5.5.10.1 (custom) cpe:2.3:a:cisco:network_services_orchestrator:5.5.3:::::::*
cisco	network_services_orchestrator	Affected: 5.6 , < 5.6.14.3 (custom) cpe:2.3:a:cisco:network_services_orchestrator:5.6:::::::*
cisco	network_services_orchestrator	Affected: 5.7 , < 5.7.15 (custom) cpe:2.3:a:cisco:network_services_orchestrator:5.7:::::::*
cisco	network_services_orchestrator	Affected: 5.8 , < 5.8.13.1 (custom) cpe:2.3:a:cisco:network_services_orchestrator:5.8:::::::*
cisco	network_services_orchestrator	Affected: 6.0 , < 6.0.12 (custom) cpe:2.3:a:cisco:network_services_orchestrator:6.0:::::::*
cisco	network_services_orchestrator	Affected: 6.1 , < 6.1.7 (custom) cpe:2.3:a:cisco:network_services_orchestrator:6.1:::::::*
cisco	network_services_orchestrator	Affected: 6.2 , < 6.2.2 (custom) cpe:2.3:a:cisco:network_services_orchestrator:6.2:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.5.3:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "7.5.10.2",
                "status": "affected",
                "version": "7.5.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.6:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "7.6.14.2",
                "status": "affected",
                "version": "7.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "7.7.15",
                "status": "affected",
                "version": "7.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.8:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "7.8.13.1",
                "status": "affected",
                "version": "7.8",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:8.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "8.0.12",
                "status": "affected",
                "version": "8.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.1.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "7.1.7"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.2.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "7.2.7"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.3.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "7.3.7"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:confd:7.4.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "confd",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "7.4.7"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.1.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "5.1.7"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.2.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "5.2.7"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.3.5:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "5.3.5"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.4.5:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "5.4.5"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.5.3:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "5.5.10.1",
                "status": "affected",
                "version": "5.5.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.6:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "5.6.14.3",
                "status": "affected",
                "version": "5.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": " \t5.7.15",
                "status": "affected",
                "version": "5.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:5.8:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": " \t5.8.13.1",
                "status": "affected",
                "version": "5.8",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:6.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "6.0.12",
                "status": "affected",
                "version": "6.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:6.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "6.1.7",
                "status": "affected",
                "version": "6.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:network_services_orchestrator:6.2:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "network_services_orchestrator",
            "vendor": "cisco",
            "versions": [
              {
                "lessThan": "6.2.2",
                "status": "affected",
                "version": "6.2",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20326",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-16T15:55:41.498842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-77",
                "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:40:29.191Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:41.542Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-nso-rwpesc-qrQGnh3f",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f"
          },
          {
            "name": "cisco-sa-cnfd-rwpesc-ZAOufyx8",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco ConfD",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "7.3.5.2"
            },
            {
              "status": "affected",
              "version": "7.3.5.1"
            },
            {
              "status": "affected",
              "version": "7.3.6"
            },
            {
              "status": "affected",
              "version": "7.4.5.3"
            },
            {
              "status": "affected",
              "version": "7.4.5.2"
            },
            {
              "status": "affected",
              "version": "7.4.6"
            },
            {
              "status": "affected",
              "version": "7.4.5.1"
            },
            {
              "status": "affected",
              "version": "7.4.8"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.4.7"
            },
            {
              "status": "affected",
              "version": "7.5.10"
            },
            {
              "status": "affected",
              "version": "7.5.4"
            },
            {
              "status": "affected",
              "version": "7.5.3.2"
            },
            {
              "status": "affected",
              "version": "7.5.3.1"
            },
            {
              "status": "affected",
              "version": "7.5.4.2"
            },
            {
              "status": "affected",
              "version": "7.5.4.1"
            },
            {
              "status": "affected",
              "version": "7.5.6.2"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "7.5.8"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.6"
            },
            {
              "status": "affected",
              "version": "7.5.4.3"
            },
            {
              "status": "affected",
              "version": "7.5.6.1"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.5.1"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.7"
            },
            {
              "status": "affected",
              "version": "7.6"
            },
            {
              "status": "affected",
              "version": "7.8"
            },
            {
              "status": "affected",
              "version": "7.6.12"
            },
            {
              "status": "affected",
              "version": "7.6.11"
            },
            {
              "status": "affected",
              "version": "7.6.9"
            },
            {
              "status": "affected",
              "version": "7.6.5"
            },
            {
              "status": "affected",
              "version": "7.6.1"
            },
            {
              "status": "affected",
              "version": "7.6.14.1"
            },
            {
              "status": "affected",
              "version": "7.6.8.1"
            },
            {
              "status": "affected",
              "version": "7.6.2"
            },
            {
              "status": "affected",
              "version": "7.6.4"
            },
            {
              "status": "affected",
              "version": "7.6.8"
            },
            {
              "status": "affected",
              "version": "7.6.7"
            },
            {
              "status": "affected",
              "version": "7.6.10"
            },
            {
              "status": "affected",
              "version": "7.6.3"
            },
            {
              "status": "affected",
              "version": "7.6.13"
            },
            {
              "status": "affected",
              "version": "7.6.14"
            },
            {
              "status": "affected",
              "version": "7.6.6"
            },
            {
              "status": "affected",
              "version": "7.7.7"
            },
            {
              "status": "affected",
              "version": "7.7.13"
            },
            {
              "status": "affected",
              "version": "7.7.4"
            },
            {
              "status": "affected",
              "version": "7.7.8"
            },
            {
              "status": "affected",
              "version": "7.7.9"
            },
            {
              "status": "affected",
              "version": "7.7.12"
            },
            {
              "status": "affected",
              "version": "7.7.2"
            },
            {
              "status": "affected",
              "version": "7.7.5"
            },
            {
              "status": "affected",
              "version": "7.7.5.1"
            },
            {
              "status": "affected",
              "version": "7.7.6"
            },
            {
              "status": "affected",
              "version": "7.7.10"
            },
            {
              "status": "affected",
              "version": "7.7.1"
            },
            {
              "status": "affected",
              "version": "7.7.3"
            },
            {
              "status": "affected",
              "version": "7.7.11"
            },
            {
              "status": "affected",
              "version": "7.8.8"
            },
            {
              "status": "affected",
              "version": "7.8.4"
            },
            {
              "status": "affected",
              "version": "7.8.2"
            },
            {
              "status": "affected",
              "version": "7.8.7"
            },
            {
              "status": "affected",
              "version": "7.8.9"
            },
            {
              "status": "affected",
              "version": "7.8.11"
            },
            {
              "status": "affected",
              "version": "7.8.5"
            },
            {
              "status": "affected",
              "version": "7.8.1"
            },
            {
              "status": "affected",
              "version": "7.8.3"
            },
            {
              "status": "affected",
              "version": "7.8.6"
            },
            {
              "status": "affected",
              "version": "7.8.10"
            },
            {
              "status": "affected",
              "version": "8.0.4"
            },
            {
              "status": "affected",
              "version": "8.0.8"
            },
            {
              "status": "affected",
              "version": "8.0.5"
            },
            {
              "status": "affected",
              "version": "8.0.7"
            },
            {
              "status": "affected",
              "version": "8.0.2"
            },
            {
              "status": "affected",
              "version": "8.0.1"
            },
            {
              "status": "affected",
              "version": "8.0.3"
            },
            {
              "status": "affected",
              "version": "8.0.6"
            },
            {
              "status": "affected",
              "version": "8.1"
            },
            {
              "status": "affected",
              "version": "8.0"
            },
            {
              "status": "affected",
              "version": "8.1.2"
            },
            {
              "status": "affected",
              "version": "8.1.4"
            },
            {
              "status": "affected",
              "version": "8.1.1"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            }
          ]
        },
        {
          "product": "Cisco ConfD Basic",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.1"
            },
            {
              "status": "affected",
              "version": "8.0.6"
            },
            {
              "status": "affected",
              "version": "8.0.4"
            },
            {
              "status": "affected",
              "version": "8.0.2"
            },
            {
              "status": "affected",
              "version": "8.0.3"
            },
            {
              "status": "affected",
              "version": "8.0.5"
            },
            {
              "status": "affected",
              "version": "8.0.10"
            },
            {
              "status": "affected",
              "version": "8.0.11"
            },
            {
              "status": "affected",
              "version": "8.0.7"
            },
            {
              "status": "affected",
              "version": "8.0.8"
            },
            {
              "status": "affected",
              "version": "8.0.9"
            },
            {
              "status": "affected",
              "version": "7.8.3"
            },
            {
              "status": "affected",
              "version": "8.0"
            }
          ]
        },
        {
          "product": "Cisco Network Services Orchestrator",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the ConfD CLI and the Cisco  Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.\n\n\nThis vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-16T14:08:18.634Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-nso-rwpesc-qrQGnh3f",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f"
        },
        {
          "name": "cisco-sa-cnfd-rwpesc-ZAOufyx8",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8"
        }
      ],
      "source": {
        "advisory": "cisco-sa-nso-rwpesc-qrQGnh3f",
        "defects": [
          "CSCwj67262",
          "CSCwi31715"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20326",
    "datePublished": "2024-05-16T14:08:18.634Z",
    "dateReserved": "2023-11-08T15:08:07.640Z",
    "dateUpdated": "2024-08-01T21:59:41.542Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Mitigation

Architecture and Design

If at all possible, use library calls rather than external processes to recreate the desired functionality.

Mitigation MIT-22

Architecture and Design Operation

Strategy: Sandbox or Jail

Run the code in a "jail" or similar sandbox environment that enforces strict boundaries between the process and the operating system. This may effectively restrict which files can be accessed in a particular directory or which commands can be executed by the software.
OS-level examples include the Unix chroot jail, AppArmor, and SELinux. In general, managed code may provide some protection. For example, java.io.FilePermission in the Java SecurityManager allows the software to specify restrictions on file operations.
This may not be a feasible solution, and it only limits the impact to the operating system; the rest of the application may still be subject to compromise.
Be careful to avoid CWE-243 and other weaknesses related to jails.

Mitigation

Architecture and Design

Strategy: Attack Surface Reduction

For any data that will be used to generate a command to be executed, keep as much of that data out of external control as possible. For example, in web applications, this may require storing the data locally in the session's state instead of sending it out to the client in a hidden form field.

Mitigation MIT-15

Architecture and Design

For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks entirely. Then, these modified values would be submitted to the server.

Mitigation MIT-4.3

Architecture and Design

Strategy: Libraries or Frameworks

Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.
For example, consider using the ESAPI Encoding control [REF-45] or a similar tool, library, or framework. These will help the programmer encode outputs in a manner less prone to error.

Mitigation MIT-28

Implementation

Strategy: Output Encoding

While it is risky to use dynamically-generated query strings, code, or commands that mix control and data together, sometimes it may be unavoidable. Properly quote arguments and escape any special characters within those arguments. The most conservative approach is to escape or filter all characters that do not pass an extremely strict allowlist (such as everything that is not alphanumeric or white space). If some special characters are still needed, such as white space, wrap each argument in quotes after the escaping/filtering step. Be careful of argument injection (CWE-88).

Mitigation

Implementation

If the program to be executed allows arguments to be specified within an input file or from standard input, then consider using that mode to pass arguments instead of the command line.

Mitigation MIT-27

Architecture and Design

Strategy: Parameterization

If available, use structured mechanisms that automatically enforce the separation between data and code. These mechanisms may be able to provide the relevant quoting, encoding, and validation automatically, instead of relying on the developer to provide this capability at every point where output is generated.
Some languages offer multiple functions that can be used to invoke commands. Where possible, identify any function that invokes a command shell using a single string, and replace it with a function that requires individual arguments. These functions typically perform appropriate quoting and filtering of arguments. For example, in C, the system() function accepts a string that contains the entire command to be executed, whereas execl(), execve(), and others require an array of strings, one for each argument. In Windows, CreateProcess() only accepts one command at a time. In Perl, if system() is provided with an array of arguments, then it will quote each of the arguments.

Mitigation MIT-5

Implementation

Strategy: Input Validation

Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does.
When performing input validation, consider all potentially relevant properties, including length, type of input, the full range of acceptable values, missing or extra inputs, syntax, consistency across related fields, and conformance to business rules. As an example of business rule logic, "boat" may be syntactically valid because it only contains alphanumeric characters, but it is not valid if the input is only expected to contain colors such as "red" or "blue."
Do not rely exclusively on looking for malicious or malformed inputs. This is likely to miss at least one undesirable input, especially if the code's environment changes. This can give attackers enough room to bypass the intended validation. However, denylists can be useful for detecting potential attacks or determining which inputs are so malformed that they should be rejected outright.
When constructing OS command strings, use stringent allowlists that limit the character set based on the expected value of the parameter in the request. This will indirectly limit the scope of an attack, but this technique is less important than proper output encoding and escaping.
Note that proper output encoding, escaping, and quoting is the most effective solution for preventing OS command injection, although input validation may provide some defense-in-depth. This is because it effectively limits what will appear in output. Input validation will not always prevent OS command injection, especially if you are required to support free-form text fields that could contain arbitrary characters. For example, when invoking a mail program, you might need to allow the subject field to contain otherwise-dangerous inputs like ";" and ">" characters, which would need to be escaped or otherwise handled. In this case, stripping the character might reduce the risk of OS command injection, but it would produce incorrect behavior because the subject field would not be recorded as the user intended. This might seem to be a minor inconvenience, but it could be more important when the program relies on well-structured subject lines in order to pass messages to other components.
Even if you make a mistake in your validation (such as forgetting one out of 100 input fields), appropriate encoding is still likely to protect you from injection-based attacks. As long as it is not done in isolation, input validation is still a useful technique, since it may significantly reduce your attack surface, allow you to detect some attacks, and provide other security benefits that proper encoding does not address.

Mitigation MIT-21

Architecture and Design

Strategy: Enforcement by Conversion

When the set of acceptable objects, such as filenames or URLs, is limited or known, create a mapping from a set of fixed input values (such as numeric IDs) to the actual filenames or URLs, and reject all other inputs.

Mitigation MIT-32

Operation

Strategy: Compilation or Build Hardening

Run the code in an environment that performs automatic taint propagation and prevents any command execution that uses tainted variables, such as Perl's "-T" switch. This will force the program to perform validation steps that remove the taint, although you must be careful to correctly validate your inputs so that you do not accidentally mark dangerous inputs as untainted (see CWE-183 and CWE-184).

Mitigation MIT-32

Operation

Strategy: Environment Hardening

Mitigation MIT-39

Implementation

Ensure that error messages only contain minimal details that are useful to the intended audience and no one else. The messages need to strike the balance between being too cryptic (which can confuse users) or being too detailed (which may reveal more than intended). The messages should not reveal the methods that were used to determine the error. Attackers can use detailed information to refine or optimize their original attack, thereby increasing their chances of success.
If errors must be captured in some detail, record them in log messages, but consider what could occur if the log messages can be viewed by attackers. Highly sensitive information such as passwords should never be saved to log files.
Avoid inconsistent messaging that might accidentally tip off an attacker about internal state, such as whether a user account exists or not.
In the context of OS Command Injection, error information passed back to the user might reveal whether an OS command is being executed and possibly which command is being used.

Mitigation

Operation

Strategy: Sandbox or Jail

Use runtime policy enforcement to create an allowlist of allowable commands, then prevent use of any command that does not appear in the allowlist. Technologies such as AppArmor are available to do this.

Mitigation MIT-29

Operation

Strategy: Firewall

Use an application firewall that can detect attacks against this weakness. It can be beneficial in cases in which the code cannot be fixed (because it is controlled by a third party), as an emergency prevention measure while more comprehensive software assurance measures are applied, or to provide defense in depth [REF-1481].

Mitigation MIT-17

Architecture and Design Operation

Strategy: Environment Hardening

Run your code using the lowest privileges that are required to accomplish the necessary tasks [REF-76]. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.

Mitigation MIT-16

Operation Implementation

Strategy: Environment Hardening

When using PHP, configure the application so that it does not use register_globals. During implementation, develop the application so that it does not rely on this feature, but be wary of implementing a register_globals emulation that is subject to weaknesses such as CWE-95, CWE-621, and similar issues.

CAPEC-108: Command Line Execution through SQL Injection

An attacker uses standard SQL injection methods to inject data into the command line for execution. This could be done directly through misuse of directives such as MSSQL_xp_cmdshell or indirectly through injection of data into the database that would be interpreted as shell commands. Sometime later, an unscrupulous backend application (or could be part of the functionality of the same application) fetches the injected data stored in the database and uses this data as command line arguments without performing proper validation. The malicious data escapes that data plane by spawning new commands to be executed on the host.

CAPEC-15: Command Delimiters

An attack of this type exploits a programs' vulnerabilities that allows an attacker's commands to be concatenated onto a legitimate command with the intent of targeting other resources such as the file system or database. The system that uses a filter or denylist input validation, as opposed to allowlist validation is vulnerable to an attacker who predicts delimiters (or combinations of delimiters) not present in the filter or denylist. As with other injection attacks, the attacker uses the command delimiter payload as an entry point to tunnel through the application and activate additional attacks through SQL queries, shell commands, network scanning, and so on.

CAPEC-43: Exploiting Multiple Input Interpretation Layers

An attacker supplies the target software with input data that contains sequences of special characters designed to bypass input validation logic. This exploit relies on the target making multiples passes over the input data and processing a "layer" of special characters with each pass. In this manner, the attacker can disguise input that would otherwise be rejected as invalid by concealing it with layers of special/escape characters that are stripped off by subsequent processing steps. The goal is to first discover cases where the input validation layer executes before one or more parsing layers. That is, user input may go through the following logic in an application: <parser1> --> <input validator> --> <parser2>. In such cases, the attacker will need to provide input that will pass through the input validator, but after passing through parser2, will be converted into something that the input validator was supposed to stop.

CAPEC-6: Argument Injection

An attacker changes the behavior or state of a targeted application through injecting data or command syntax through the targets use of non-validated and non-filtered arguments of exposed services or methods.

CAPEC-88: OS Command Injection

In this type of an attack, an adversary injects operating system commands into existing application functions. An application that uses untrusted input to build command strings is vulnerable. An adversary can leverage OS command injection in an application to elevate privileges, execute arbitrary commands and compromise the underlying operating system.

← Back to the CWE list