CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20435

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 18.2%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2024-20435

Cisco » Secure Web Appliance Virtual S1000v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s1000v:-
Cisco » Secure Web Appliance Virtual S100v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s100v:-
Cisco » Secure Web Appliance Virtual S300v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s300v:-
Cisco » Secure Web Appliance Virtual S600v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s600v:-
Cisco » Secure Web Appliance S196 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s196:-
Cisco » Secure Web Appliance S396 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s396:-
Cisco » Secure Web Appliance S696 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s696:-
Cisco » Asyncos » Version: 11.7.0-406

cpe:2.3:o:cisco:asyncos:11.7.0-406
Cisco » Asyncos » Version: 11.7.0-418

cpe:2.3:o:cisco:asyncos:11.7.0-418
Cisco » Asyncos » Version: 11.7.1-006

cpe:2.3:o:cisco:asyncos:11.7.1-006
Cisco » Asyncos » Version: 11.7.1-020

cpe:2.3:o:cisco:asyncos:11.7.1-020
Cisco » Asyncos » Version: 11.7.1-049

cpe:2.3:o:cisco:asyncos:11.7.1-049
Cisco » Asyncos » Version: 11.7.2-011

cpe:2.3:o:cisco:asyncos:11.7.2-011
Cisco » Asyncos » Version: 11.8.0-414

cpe:2.3:o:cisco:asyncos:11.8.0-414
Cisco » Asyncos » Version: 11.8.1-023

cpe:2.3:o:cisco:asyncos:11.8.1-023
Cisco » Asyncos » Version: 11.8.3-018

cpe:2.3:o:cisco:asyncos:11.8.3-018
Cisco » Asyncos » Version: 11.8.3-021

cpe:2.3:o:cisco:asyncos:11.8.3-021
Cisco » Asyncos » Version: 12.0.1-268

cpe:2.3:o:cisco:asyncos:12.0.1-268
Cisco » Asyncos » Version: 12.0.3-007

cpe:2.3:o:cisco:asyncos:12.0.3-007
Cisco » Asyncos » Version: 12.5.1-011

cpe:2.3:o:cisco:asyncos:12.5.1-011
Cisco » Asyncos » Version: 12.5.2-007

cpe:2.3:o:cisco:asyncos:12.5.2-007
Cisco » Asyncos » Version: 12.5.4-005

cpe:2.3:o:cisco:asyncos:12.5.4-005
Cisco » Asyncos » Version: 12.5.5-004

cpe:2.3:o:cisco:asyncos:12.5.5-004
Cisco » Asyncos » Version: 12.5.6-008

cpe:2.3:o:cisco:asyncos:12.5.6-008
Cisco » Asyncos » Version: 14.0.2-012

cpe:2.3:o:cisco:asyncos:14.0.2-012
Cisco » Asyncos » Version: 14.0.3-014

cpe:2.3:o:cisco:asyncos:14.0.3-014
Cisco » Asyncos » Version: 14.0.4-005

cpe:2.3:o:cisco:asyncos:14.0.4-005
Cisco » Asyncos » Version: 14.0.5-007

cpe:2.3:o:cisco:asyncos:14.0.5-007
Cisco » Asyncos » Version: 14.5.0-498

cpe:2.3:o:cisco:asyncos:14.5.0-498
Cisco » Asyncos » Version: 14.5.1-016

cpe:2.3:o:cisco:asyncos:14.5.1-016
Cisco » Asyncos » Version: 14.5.2-011

cpe:2.3:o:cisco:asyncos:14.5.2-011
Cisco » Asyncos » Version: 15.0.0-322

cpe:2.3:o:cisco:asyncos:15.0.0-322
Cisco » Asyncos » Version: 15.0.0-355

cpe:2.3:o:cisco:asyncos:15.0.0-355
Cisco » Asyncos » Version: 15.1.0-287

cpe:2.3:o:cisco:asyncos:15.1.0-287

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20435

Products

Pricing

Contact Us