Vulnerability-Lookup

CVE-2024-20296 (GCVE-0-2024-20296)

Vulnerability from cvelistv5 – Published: 2024-07-17 16:28 – Updated: 2024-08-01 21:59

Summary

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device. This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-17 00:00 UTC

CWE

CWE-434 - Unrestricted Upload of File with Dangerous Type

Assigner

cisco mitre root Scorecard

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version	CPE status
Cisco	Cisco Identity Services Engine Software	Affected: 2.7.0 Affected: 2.7.0 p1 Affected: 2.7.0 p2 Affected: 2.7.0 p3 Affected: 2.7.0 p4 Affected: 2.7.0 p5 Affected: 2.7.0 p6 Affected: 2.7.0 p7 Affected: 2.7.0 p8 Affected: 2.7.0 p9 Affected: 2.7.0 p10 Affected: 3.0.0 Affected: 3.0.0 p1 Affected: 3.0.0 p2 Affected: 3.0.0 p3 Affected: 3.0.0 p4 Affected: 3.0.0 p5 Affected: 3.0.0 p6 Affected: 3.0.0 p7 Affected: 3.0.0 p8 Affected: 3.1.0 Affected: 3.1.0 p1 Affected: 3.1.0 p3 Affected: 3.1.0 p2 Affected: 3.1.0 p4 Affected: 3.1.0 p5 Affected: 3.1.0 p6 Affected: 3.1.0 p7 Affected: 3.1.0 p8 Affected: 3.1.0 p9 Affected: 3.2.0 Affected: 3.2.0 p1 Affected: 3.2.0 p2 Affected: 3.2.0 p3 Affected: 3.2.0 p4 Affected: 3.2.0 p5 Affected: 3.2.0 p6 Affected: 3.3.0	guessed
cisco	identity_services_engine_software	Affected: 2.7.0 Affected: 2.7.0_p1 Affected: 2.7.0_p2 Affected: 2.7.0_p3 Affected: 2.7.0_p4 Affected: 2.7.0_p5 Affected: 2.7.0_p6 Affected: 2.7.0_p7 Affected: 2.7.0_p8 Affected: 2.7.0_p9 Affected: 2.7.0_p10 Affected: 3.0.0 Affected: 3.0.0_p1 Affected: 3.0.0_p2 Affected: 3.0.0_p3 Affected: 3.0.0_p4 Affected: 3.0.0_p5 Affected: 3.0.0_p6 Affected: 3.0.0_p7 Affected: 3.0.0_p8 Affected: 3.1.0 Affected: 3.1.0_p1 Affected: 3.1.0_p3 Affected: 3.1.0_p2 Affected: 3.1.0_p4 Affected: 3.1.0_p5 Affected: 3.1.0_p6 Affected: 3.1.0_p7 Affected: 3.1.0_p8 Affected: 3.1.0_p9 Affected: 3.2.0 Affected: 3.2.0_p1 Affected: 3.2.0_p2 Affected: 3.2.0_p3 Affected: 3.2.0_p4 Affected: 3.2.0_p5 Affected: 3.2.0_p6 Affected: 3.3.0 cpe:2.3:a:cisco:identity_services_engine_software:2.7.0:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p1:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p2:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p3:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p4:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p5:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p6:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p7:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p8:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p9:::::::* cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p10:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p1:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p2:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p3:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p4:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p5:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p6:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p7:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p8:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p1:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p3:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p2:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p4:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p5:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p6:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p7:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p8:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p9:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.2.0:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p1:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p2:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p3:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p4:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p5:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p6:::::::* cpe:2.3:a:cisco:identity_services_engine_software:3.3.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p1:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p2:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p5:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p7:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p8:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p9:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p10:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p1:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p2:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p5:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p7:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p8:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p1:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p2:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p5:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p7:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p8:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p9:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p1:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p2:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p3:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p4:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p5:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p6:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:identity_services_engine_software:3.3.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "identity_services_engine_software",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "2.7.0"
              },
              {
                "status": "affected",
                "version": "2.7.0_p1"
              },
              {
                "status": "affected",
                "version": "2.7.0_p2"
              },
              {
                "status": "affected",
                "version": "2.7.0_p3"
              },
              {
                "status": "affected",
                "version": "2.7.0_p4"
              },
              {
                "status": "affected",
                "version": "2.7.0_p5"
              },
              {
                "status": "affected",
                "version": "2.7.0_p6"
              },
              {
                "status": "affected",
                "version": "2.7.0_p7"
              },
              {
                "status": "affected",
                "version": "2.7.0_p8"
              },
              {
                "status": "affected",
                "version": "2.7.0_p9"
              },
              {
                "status": "affected",
                "version": "2.7.0_p10"
              },
              {
                "status": "affected",
                "version": "3.0.0"
              },
              {
                "status": "affected",
                "version": "3.0.0_p1"
              },
              {
                "status": "affected",
                "version": "3.0.0_p2"
              },
              {
                "status": "affected",
                "version": "3.0.0_p3"
              },
              {
                "status": "affected",
                "version": "3.0.0_p4"
              },
              {
                "status": "affected",
                "version": "3.0.0_p5"
              },
              {
                "status": "affected",
                "version": "3.0.0_p6"
              },
              {
                "status": "affected",
                "version": "3.0.0_p7"
              },
              {
                "status": "affected",
                "version": "3.0.0_p8"
              },
              {
                "status": "affected",
                "version": "3.1.0"
              },
              {
                "status": "affected",
                "version": "3.1.0_p1"
              },
              {
                "status": "affected",
                "version": "3.1.0_p3"
              },
              {
                "status": "affected",
                "version": "3.1.0_p2"
              },
              {
                "status": "affected",
                "version": "3.1.0_p4"
              },
              {
                "status": "affected",
                "version": "3.1.0_p5"
              },
              {
                "status": "affected",
                "version": "3.1.0_p6"
              },
              {
                "status": "affected",
                "version": "3.1.0_p7"
              },
              {
                "status": "affected",
                "version": "3.1.0_p8"
              },
              {
                "status": "affected",
                "version": "3.1.0_p9"
              },
              {
                "status": "affected",
                "version": "3.2.0"
              },
              {
                "status": "affected",
                "version": "3.2.0_p1"
              },
              {
                "status": "affected",
                "version": "3.2.0_p2"
              },
              {
                "status": "affected",
                "version": "3.2.0_p3"
              },
              {
                "status": "affected",
                "version": "3.2.0_p4"
              },
              {
                "status": "affected",
                "version": "3.2.0_p5"
              },
              {
                "status": "affected",
                "version": "3.2.0_p6"
              },
              {
                "status": "affected",
                "version": "3.3.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20296",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-18T03:55:22.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:41.103Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-ise-file-upload-krW2TxA9",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Identity Services Engine Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.7.0"
            },
            {
              "status": "affected",
              "version": "2.7.0 p1"
            },
            {
              "status": "affected",
              "version": "2.7.0 p2"
            },
            {
              "status": "affected",
              "version": "2.7.0 p3"
            },
            {
              "status": "affected",
              "version": "2.7.0 p4"
            },
            {
              "status": "affected",
              "version": "2.7.0 p5"
            },
            {
              "status": "affected",
              "version": "2.7.0 p6"
            },
            {
              "status": "affected",
              "version": "2.7.0 p7"
            },
            {
              "status": "affected",
              "version": "2.7.0 p8"
            },
            {
              "status": "affected",
              "version": "2.7.0 p9"
            },
            {
              "status": "affected",
              "version": "2.7.0 p10"
            },
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.0 p1"
            },
            {
              "status": "affected",
              "version": "3.0.0 p2"
            },
            {
              "status": "affected",
              "version": "3.0.0 p3"
            },
            {
              "status": "affected",
              "version": "3.0.0 p4"
            },
            {
              "status": "affected",
              "version": "3.0.0 p5"
            },
            {
              "status": "affected",
              "version": "3.0.0 p6"
            },
            {
              "status": "affected",
              "version": "3.0.0 p7"
            },
            {
              "status": "affected",
              "version": "3.0.0 p8"
            },
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p3"
            },
            {
              "status": "affected",
              "version": "3.1.0 p2"
            },
            {
              "status": "affected",
              "version": "3.1.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p5"
            },
            {
              "status": "affected",
              "version": "3.1.0 p6"
            },
            {
              "status": "affected",
              "version": "3.1.0 p7"
            },
            {
              "status": "affected",
              "version": "3.1.0 p8"
            },
            {
              "status": "affected",
              "version": "3.1.0 p9"
            },
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p1"
            },
            {
              "status": "affected",
              "version": "3.2.0 p2"
            },
            {
              "status": "affected",
              "version": "3.2.0 p3"
            },
            {
              "status": "affected",
              "version": "3.2.0 p4"
            },
            {
              "status": "affected",
              "version": "3.2.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p6"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.\r\n\r This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-434",
              "description": "Unrestricted Upload of File with Dangerous Type",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-17T16:28:22.193Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ise-file-upload-krW2TxA9",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ise-file-upload-krW2TxA9",
        "defects": [
          "CSCwh97876"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20296",
    "datePublished": "2024-07-17T16:28:22.193Z",
    "dateReserved": "2023-11-08T15:08:07.629Z",
    "dateUpdated": "2024-08-01T21:59:41.103Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-20296",
      "date": "2026-10-01",
      "epss": "0.00471",
      "percentile": "0.38467"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "Cisco Identity Services Engine Software",
                "vendor": "Cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.7.0"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p1"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p2"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p3"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p4"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p5"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p6"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p7"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p8"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p9"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0 p10"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p7"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0 p8"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p7"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p8"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0 p9"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0 p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0 p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0 p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0 p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0 p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0 p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.3.0"
                  }
                ]
              }
            ],
            "source": "psirt@cisco.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p7:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p8:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p9:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p10:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p7:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p8:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p7:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p8:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p9:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.3.0:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "identity_services_engine_software",
                "vendor": "cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.7.0"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p7"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p8"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p9"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p10"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p7"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p8"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p7"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p8"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p9"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.3.0"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "52347B52-0D70-4438-AC9C-52B72BB5E98D",
                    "versionEndExcluding": "3.1",
                    "versionStartIncluding": "3.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*",
                    "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*",
                    "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*",
                    "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*",
                    "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*",
                    "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*",
                    "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*",
                    "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*",
                    "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*",
                    "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
                    "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
                    "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
                    "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
                    "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
                    "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
                    "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
                    "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
                    "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.\r\n\r This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root."
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de Cisco Identity Services Engine (ISE) podr\u00eda permitir que un atacante remoto autenticado cargue archivos arbitrarios en un dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante necesitar\u00eda al menos credenciales v\u00e1lidas de administrador de pol\u00edticas en el dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n inadecuada de los archivos que se cargan en la interfaz de administraci\u00f3n basada en web. Un atacante podr\u00eda aprovechar esta vulnerabilidad cargando archivos arbitrarios en un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante almacenar archivos maliciosos en el sistema, ejecutar comandos arbitrarios en el sistema operativo y elevar privilegios a root."
          }
        ],
        "id": "CVE-2024-20296",
        "lastModified": "2026-06-17T07:06:18.657",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 1.2,
              "impactScore": 3.4,
              "source": "psirt@cisco.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.2,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-20296",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-17T00:00:00+00:00",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-07-17T17:15:12.367",
        "references": [
          {
            "source": "psirt@cisco.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
          }
        ],
        "sourceIdentifier": "psirt@cisco.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-434"
              }
            ],
            "source": "psirt@cisco.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-434"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T19:11:41+00:00",
      "cve": "CVE-2024-20296",
      "id": "CVE-2024-20296",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-20296",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-20296.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T21:59:41.103Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "cisco-sa-ise-file-upload-krW2TxA9",
                "tags": [
                  "x_transferred"
                ],
                "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p7:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p8:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p9:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p10:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p7:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p8:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p7:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p8:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p9:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p1:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p2:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p3:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p4:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p5:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p6:*:*:*:*:*:*:*",
                  "cpe:2.3:a:cisco:identity_services_engine_software:3.3.0:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "identity_services_engine_software",
                "vendor": "cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.7.0"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p7"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p8"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p9"
                  },
                  {
                    "status": "affected",
                    "version": "2.7.0_p10"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p7"
                  },
                  {
                    "status": "affected",
                    "version": "3.0.0_p8"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p7"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p8"
                  },
                  {
                    "status": "affected",
                    "version": "3.1.0_p9"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p1"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p2"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p3"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p4"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p5"
                  },
                  {
                    "status": "affected",
                    "version": "3.2.0_p6"
                  },
                  {
                    "status": "affected",
                    "version": "3.3.0"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-20296",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-07-17T21:12:19.717053Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-07-17T21:14:19.971Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Cisco Identity Services Engine Software",
              "vendor": "Cisco",
              "versions": [
                {
                  "status": "affected",
                  "version": "2.7.0"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p1"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p2"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p3"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p4"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p5"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p6"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p7"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p8"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p9"
                },
                {
                  "status": "affected",
                  "version": "2.7.0 p10"
                },
                {
                  "status": "affected",
                  "version": "3.0.0"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p1"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p2"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p3"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p4"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p5"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p6"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p7"
                },
                {
                  "status": "affected",
                  "version": "3.0.0 p8"
                },
                {
                  "status": "affected",
                  "version": "3.1.0"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p1"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p3"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p2"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p4"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p5"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p6"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p7"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p8"
                },
                {
                  "status": "affected",
                  "version": "3.1.0 p9"
                },
                {
                  "status": "affected",
                  "version": "3.2.0"
                },
                {
                  "status": "affected",
                  "version": "3.2.0 p1"
                },
                {
                  "status": "affected",
                  "version": "3.2.0 p2"
                },
                {
                  "status": "affected",
                  "version": "3.2.0 p3"
                },
                {
                  "status": "affected",
                  "version": "3.2.0 p4"
                },
                {
                  "status": "affected",
                  "version": "3.2.0 p5"
                },
                {
                  "status": "affected",
                  "version": "3.2.0 p6"
                },
                {
                  "status": "affected",
                  "version": "3.3.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.\r\n\r This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root."
            }
          ],
          "exploits": [
            {
              "lang": "en",
              "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
                "version": "3.1"
              },
              "format": "cvssV3_1"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-434",
                  "description": "Unrestricted Upload of File with Dangerous Type",
                  "lang": "en",
                  "type": "cwe"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-07-17T16:28:22.193Z",
            "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
            "shortName": "cisco"
          },
          "references": [
            {
              "name": "cisco-sa-ise-file-upload-krW2TxA9",
              "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
            }
          ],
          "source": {
            "advisory": "cisco-sa-ise-file-upload-krW2TxA9",
            "defects": [
              "CSCwh97876"
            ],
            "discovery": "EXTERNAL"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "assignerShortName": "cisco",
        "cveId": "CVE-2024-20296",
        "datePublished": "2024-07-17T16:28:22.193Z",
        "dateReserved": "2023-11-08T15:08:07.629Z",
        "dateUpdated": "2024-08-01T21:59:41.103Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

BDU:2025-03741 (CVE-2024-20296)

Vulnerability from fstec – Published: 2025-04-03 – Updated: 2025-08-13 – View on bdu.fstec.ru Fixed

Title

Уязвимость веб-интерфейса управления платформы управления политиками соединений Cisco Identity Services Engine (ISE), позволяющая нарушителю загружать произвольные файлы, повысить свои привилегии и выполнить произвольные команды

Summary

Уязвимость веб-интерфейса управления платформы управления политиками соединений Cisco Identity Services Engine (ISE) связана с неограниченной загрузкой файлов опасного типа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, загружать произвольные файлы, повысить свои привилегии и выполнить произвольные команды

Severity

6.5 (Medium) CVSS 2.0


                      
                        AV:N/AC:L/Au:S/C:P/I:P/A:P

4.7 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Functionality abuse

Incidents

Being clarified

Remediation

Software update

CWE

CWE-434 - Неограниченная загрузка файлов опасного типа

Aliases

CVE-2024-20296

References

1 reference

URL
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/c…

Impacted products

1 product from 2 vendors

Vendors

Cisco Systems, Inc.

Products

Cisco Identity Services Engine

Versions

от 3.2 до 3.2P7 (Cisco Identity Services Engine), от 3.3 до 3.3P3 (Cisco Identity Services Engine), до 3.1P10 (Cisco Identity Services Engine)

Product types

Network appliance software

Mitigations

Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
  "CVSS 3.0": "AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 3.2 \u0434\u043e 3.2P7 (Cisco Identity Services Engine), \u043e\u0442 3.3 \u0434\u043e 3.3P3 (Cisco Identity Services Engine), \u0434\u043e 3.1P10 (Cisco Identity Services Engine)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "17.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.08.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-03741",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-20296",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco Identity Services Engine",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Cisco Identity Services Engine (ISE), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430 (CWE-434)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Cisco Identity Services Engine (ISE) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-434",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,7)"
}

CERTFR-2024-AVI-0602

Vulnerability from certfr_avis - Published: 2024-07-18 - Updated: 2024-07-18

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que les correctifs de sécurité pour la vulnérabilité CVE-2024-20435 affectant Secure Web Appliance seront publiés en juillet (14.5.3 MR) et août (15.0 MR) 2024. Les correctifs pour la vulnérabilité CVE-2024-20296 affectant ISE seront publiés en septembre 2024 (3.2P7) et janvier 2025 (3.1P10), la version 3.3P3 est déjà disponible.

Impacted products

Vendor	Product	Description
Cisco	Secure Web Appliance	Secure Web Appliance avec AsyncOS versions 15.0.x antérieures à 15.0 MR
Cisco	Secure Email Gateway	Secure Email Gateway avec une version de paquet de Content Scanner Tools antérieure à 23.3.0.4823
Cisco	Identity Services Engine	Identity Services Engine (ISE) versions antérieures à 3.1P10
Cisco	Secure Web Appliance	Secure Web Appliance avec AsyncOS versions 15.1.x
Cisco	Intelligent Node Software	iNode Software versions antérieures à 4.0.0
Cisco	Identity Services Engine	Identity Services Engine (ISE) versions 3.2.x antérieures à 3.2P7
Cisco	Identity Services Engine	Identity Services Engine (ISE) versions 3.3.x antérieures à 3.3P3
Cisco	Intelligent Node Software	iNode Manager Software versions antérieures à 24.1
Cisco	Smart Software Manager	Smart Software Manager (SSM) On-Prem verions 8.x antérieures à 8-202212
Cisco	Secure Web Appliance	Secure Web Appliance avec AsyncOS versions antérieures à 14.5.3 MR

References

Title

Publication Time

CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9

Vulnerability from csaf_cisco - Published: 2024-07-17 16:00 - Updated: 2024-07-17 16:00

Summary

Cisco Identity Services Engine Arbitrary File Upload Vulnerability

Scope

1 vulnerability in this advisory, including CVE-2024-20296.

CVE-2024-20296

4.7 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Known affected: 1 product

https://software.cisco.com

Open the full advisory

CNVD-2024-37704

Vulnerability from cnvd - Published: 2024-09-05

Title

Cisco Identity Services Engine文件上传漏洞

Description

Cisco Identity Services Engine（Cisco ISE）是美国思科（Cisco）公司的一款环境感知平台（ISE身份服务引擎）。该平台通过收集网络、用户和设备中的实时信息，制定并实施相应策略来监管网络。 Cisco Identity Services Engine存在文件上传漏洞，该漏洞源于对上传到基于Web的管理界面的文件验证不当。攻击者可利用该漏洞在系统上存储恶意文件，在操作系统上执行任意命令，并将权限提升至root。

Severity

中

Patch Name

Cisco Identity Services Engine文件上传漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-20296

Impacted products

Name
Cisco Identity Services Engine

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-20296",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-20296"
    }
  },
  "description": "Cisco Identity Services Engine\uff08Cisco ISE\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u73af\u5883\u611f\u77e5\u5e73\u53f0\uff08ISE\u8eab\u4efd\u670d\u52a1\u5f15\u64ce\uff09\u3002\u8be5\u5e73\u53f0\u901a\u8fc7\u6536\u96c6\u7f51\u7edc\u3001\u7528\u6237\u548c\u8bbe\u5907\u4e2d\u7684\u5b9e\u65f6\u4fe1\u606f\uff0c\u5236\u5b9a\u5e76\u5b9e\u65bd\u76f8\u5e94\u7b56\u7565\u6765\u76d1\u7ba1\u7f51\u7edc\u3002\n\nCisco Identity Services Engine\u5b58\u5728\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5bf9\u4e0a\u4f20\u5230\u57fa\u4e8eWeb\u7684\u7ba1\u7406\u754c\u9762\u7684\u6587\u4ef6\u9a8c\u8bc1\u4e0d\u5f53\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u5b58\u50a8\u6076\u610f\u6587\u4ef6\uff0c\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\uff0c\u5e76\u5c06\u6743\u9650\u63d0\u5347\u81f3root\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-37704",
  "openTime": "2024-09-05",
  "patchDescription": "Cisco Identity Services Engine\uff08Cisco ISE\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u73af\u5883\u611f\u77e5\u5e73\u53f0\uff08ISE\u8eab\u4efd\u670d\u52a1\u5f15\u64ce\uff09\u3002\u8be5\u5e73\u53f0\u901a\u8fc7\u6536\u96c6\u7f51\u7edc\u3001\u7528\u6237\u548c\u8bbe\u5907\u4e2d\u7684\u5b9e\u65f6\u4fe1\u606f\uff0c\u5236\u5b9a\u5e76\u5b9e\u65bd\u76f8\u5e94\u7b56\u7565\u6765\u76d1\u7ba1\u7f51\u7edc\u3002\r\n\r\nCisco Identity Services Engine\u5b58\u5728\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5bf9\u4e0a\u4f20\u5230\u57fa\u4e8eWeb\u7684\u7ba1\u7406\u754c\u9762\u7684\u6587\u4ef6\u9a8c\u8bc1\u4e0d\u5f53\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u5b58\u50a8\u6076\u610f\u6587\u4ef6\uff0c\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\uff0c\u5e76\u5c06\u6743\u9650\u63d0\u5347\u81f3root\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Identity Services Engine\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Identity Services Engine"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-20296",
  "serverity": "\u4e2d",
  "submitTime": "2024-07-24",
  "title": "Cisco Identity Services Engine\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e"
}

FKIE_CVE-2024-20296

Vulnerability from fkie_nvd - Published: 2024-07-17 17:15 - Updated: 2026-06-17 07:06

Severity

4.7 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9	Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9	Vendor Advisory

Impacted products

Vendor	Product	Version
cisco	identity_services_engine	*
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.1.0
cisco	identity_services_engine	3.2.0
cisco	identity_services_engine	3.2.0
cisco	identity_services_engine	3.2.0
cisco	identity_services_engine	3.2.0
cisco	identity_services_engine	3.2.0
cisco	identity_services_engine	3.2.0
cisco	identity_services_engine	3.2.0
cisco	identity_services_engine	3.3.0
cisco	identity_services_engine	3.3.0
cisco	identity_services_engine	3.3.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Cisco Identity Services Engine Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.7.0"
            },
            {
              "status": "affected",
              "version": "2.7.0 p1"
            },
            {
              "status": "affected",
              "version": "2.7.0 p2"
            },
            {
              "status": "affected",
              "version": "2.7.0 p3"
            },
            {
              "status": "affected",
              "version": "2.7.0 p4"
            },
            {
              "status": "affected",
              "version": "2.7.0 p5"
            },
            {
              "status": "affected",
              "version": "2.7.0 p6"
            },
            {
              "status": "affected",
              "version": "2.7.0 p7"
            },
            {
              "status": "affected",
              "version": "2.7.0 p8"
            },
            {
              "status": "affected",
              "version": "2.7.0 p9"
            },
            {
              "status": "affected",
              "version": "2.7.0 p10"
            },
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.0 p1"
            },
            {
              "status": "affected",
              "version": "3.0.0 p2"
            },
            {
              "status": "affected",
              "version": "3.0.0 p3"
            },
            {
              "status": "affected",
              "version": "3.0.0 p4"
            },
            {
              "status": "affected",
              "version": "3.0.0 p5"
            },
            {
              "status": "affected",
              "version": "3.0.0 p6"
            },
            {
              "status": "affected",
              "version": "3.0.0 p7"
            },
            {
              "status": "affected",
              "version": "3.0.0 p8"
            },
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p3"
            },
            {
              "status": "affected",
              "version": "3.1.0 p2"
            },
            {
              "status": "affected",
              "version": "3.1.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p5"
            },
            {
              "status": "affected",
              "version": "3.1.0 p6"
            },
            {
              "status": "affected",
              "version": "3.1.0 p7"
            },
            {
              "status": "affected",
              "version": "3.1.0 p8"
            },
            {
              "status": "affected",
              "version": "3.1.0 p9"
            },
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p1"
            },
            {
              "status": "affected",
              "version": "3.2.0 p2"
            },
            {
              "status": "affected",
              "version": "3.2.0 p3"
            },
            {
              "status": "affected",
              "version": "3.2.0 p4"
            },
            {
              "status": "affected",
              "version": "3.2.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p6"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p1:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p2:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p3:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p4:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p5:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p6:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p7:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p8:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p9:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:2.7.0_p10:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p1:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p2:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p3:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p4:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p5:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p6:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p7:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.0.0_p8:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p1:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p3:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p2:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p4:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p5:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p6:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p7:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p8:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.1.0_p9:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p1:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p2:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p3:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p4:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p5:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.2.0_p6:*:*:*:*:*:*:*",
            "cpe:2.3:a:cisco:identity_services_engine_software:3.3.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "identity_services_engine_software",
          "vendor": "cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.7.0"
            },
            {
              "status": "affected",
              "version": "2.7.0_p1"
            },
            {
              "status": "affected",
              "version": "2.7.0_p2"
            },
            {
              "status": "affected",
              "version": "2.7.0_p3"
            },
            {
              "status": "affected",
              "version": "2.7.0_p4"
            },
            {
              "status": "affected",
              "version": "2.7.0_p5"
            },
            {
              "status": "affected",
              "version": "2.7.0_p6"
            },
            {
              "status": "affected",
              "version": "2.7.0_p7"
            },
            {
              "status": "affected",
              "version": "2.7.0_p8"
            },
            {
              "status": "affected",
              "version": "2.7.0_p9"
            },
            {
              "status": "affected",
              "version": "2.7.0_p10"
            },
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.0_p1"
            },
            {
              "status": "affected",
              "version": "3.0.0_p2"
            },
            {
              "status": "affected",
              "version": "3.0.0_p3"
            },
            {
              "status": "affected",
              "version": "3.0.0_p4"
            },
            {
              "status": "affected",
              "version": "3.0.0_p5"
            },
            {
              "status": "affected",
              "version": "3.0.0_p6"
            },
            {
              "status": "affected",
              "version": "3.0.0_p7"
            },
            {
              "status": "affected",
              "version": "3.0.0_p8"
            },
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.1.0_p1"
            },
            {
              "status": "affected",
              "version": "3.1.0_p3"
            },
            {
              "status": "affected",
              "version": "3.1.0_p2"
            },
            {
              "status": "affected",
              "version": "3.1.0_p4"
            },
            {
              "status": "affected",
              "version": "3.1.0_p5"
            },
            {
              "status": "affected",
              "version": "3.1.0_p6"
            },
            {
              "status": "affected",
              "version": "3.1.0_p7"
            },
            {
              "status": "affected",
              "version": "3.1.0_p8"
            },
            {
              "status": "affected",
              "version": "3.1.0_p9"
            },
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.2.0_p1"
            },
            {
              "status": "affected",
              "version": "3.2.0_p2"
            },
            {
              "status": "affected",
              "version": "3.2.0_p3"
            },
            {
              "status": "affected",
              "version": "3.2.0_p4"
            },
            {
              "status": "affected",
              "version": "3.2.0_p5"
            },
            {
              "status": "affected",
              "version": "3.2.0_p6"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "52347B52-0D70-4438-AC9C-52B72BB5E98D",
              "versionEndExcluding": "3.1",
              "versionStartIncluding": "3.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*",
              "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*",
              "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*",
              "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*",
              "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*",
              "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*",
              "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*",
              "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*",
              "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*",
              "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
              "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
              "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
              "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
              "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
              "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
              "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
              "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
              "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.\r\n\r This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de Cisco Identity Services Engine (ISE) podr\u00eda permitir que un atacante remoto autenticado cargue archivos arbitrarios en un dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante necesitar\u00eda al menos credenciales v\u00e1lidas de administrador de pol\u00edticas en el dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n inadecuada de los archivos que se cargan en la interfaz de administraci\u00f3n basada en web. Un atacante podr\u00eda aprovechar esta vulnerabilidad cargando archivos arbitrarios en un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante almacenar archivos maliciosos en el sistema, ejecutar comandos arbitrarios en el sistema operativo y elevar privilegios a root."
    }
  ],
  "id": "CVE-2024-20296",
  "lastModified": "2026-06-17T07:06:18.657",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 4.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 3.4,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-20296",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-07-17T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-07-17T17:15:12.367",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-MGJ5-J889-643M

Vulnerability from github – Published: 2024-07-17 18:31 – Updated: 2024-07-17 18:31

Details

This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.

Severity

4.7 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-20296"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-434"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-07-17T17:15:12Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.\n\n This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.",
  "id": "GHSA-mgj5-j889-643m",
  "modified": "2024-07-17T18:31:00Z",
  "published": "2024-07-17T18:31:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20296"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-krW2TxA9"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-20296

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-20296

Aliases

CVE-2024-20296

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2024-20296",
    "id": "GSD-2024-20296"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-20296"
      ],
      "id": "GSD-2024-20296",
      "modified": "2023-12-13T01:21:43.170595Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-20296",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

WID-SEC-W-2024-1665

Vulnerability from csaf_certbund - Published: 2024-07-17 22:00 - Updated: 2024-07-17 22:00

Summary

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Privilegienerweiterung und Codeausführung

Severity

Mittel

Scope

1 vulnerability in this advisory, including CVE-2024-20296.

CVE-2024-20296

Es besteht eine Schwachstelle in der webbasierten Management-Schnittstelle der Cisco Identity Services Engine (ISE) aufgrund einer unsachgemäßen Validierung von hochgeladenen Dateien, die es ermöglicht, bösartige Dateien auf dem System zu speichern. Durch das Hochladen beliebiger Dateien kann ein entfernter authentifizierter Angreifer diese Schwachstelle ausnutzen, um beliebige Dateien auszuführen und seine Privilegien zu erweitern.

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-20296 (GCVE-0-2024-20296)

BDU:2025-03741 (CVE-2024-20296)

CERTFR-2024-AVI-0602

Solutions

CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9

CNVD-2024-37704

FKIE_CVE-2024-20296

GHSA-MGJ5-J889-643M

GSD-2024-20296

WID-SEC-W-2024-1665

Tags

Sightings

Nomenclature

Related by attack behaviour