{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2024-20295", "ASSIGNER": "psirt@cisco.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or higher privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "cweId": "CWE-78" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Cisco", "product": { "product_data": [ { "product_name": "Cisco Unified Computing System (Standalone)", "version": { "version_data": [ { "version_affected": "=", "version_value": "3.0(1c)" }, { "version_affected": "=", "version_value": "3.0(1d)" }, { "version_affected": "=", "version_value": "3.0(2b)" }, { "version_affected": "=", "version_value": "3.0(3a)" }, { "version_affected": "=", "version_value": "3.0(3b)" }, { "version_affected": "=", "version_value": "3.0(3c)" }, { "version_affected": "=", "version_value": "3.0(3e)" }, { "version_affected": "=", "version_value": "3.0(3f)" }, { "version_affected": "=", "version_value": "3.0(4a)" }, { "version_affected": "=", "version_value": "3.0(4d)" }, { "version_affected": "=", "version_value": "3.0(4e)" }, { "version_affected": "=", "version_value": "3.0(4i)" }, { "version_affected": "=", "version_value": "3.0(4j)" }, { "version_affected": "=", "version_value": "3.0(4k)" }, { "version_affected": "=", "version_value": "3.0(4l)" }, { "version_affected": "=", "version_value": "3.0(4m)" }, { "version_affected": "=", "version_value": "3.0(4n)" }, { "version_affected": "=", "version_value": "3.0(4o)" }, { "version_affected": "=", "version_value": "3.0(4p)" }, { "version_affected": "=", "version_value": "3.0(4q)" }, { "version_affected": "=", "version_value": "3.0(4r)" }, { "version_affected": "=", "version_value": "3.0(4s)" }, { "version_affected": "=", "version_value": "2.0(10b)" }, { "version_affected": "=", "version_value": "2.0(10c)" }, { "version_affected": "=", "version_value": "2.0(10e)" }, { "version_affected": "=", "version_value": "2.0(10f)" }, { "version_affected": "=", "version_value": "2.0(10g)" }, { "version_affected": "=", "version_value": "2.0(10h)" }, { "version_affected": "=", "version_value": "2.0(10i)" }, { "version_affected": "=", "version_value": "2.0(10k)" }, { "version_affected": "=", "version_value": "2.0(10l)" }, { "version_affected": "=", "version_value": "2.0(12b)" }, { "version_affected": "=", "version_value": "2.0(12c)" }, { "version_affected": "=", "version_value": "2.0(12d)" }, { "version_affected": "=", "version_value": "2.0(12e)" }, { "version_affected": "=", "version_value": "2.0(12f)" }, { "version_affected": "=", "version_value": "2.0(12g)" }, { "version_affected": "=", "version_value": "2.0(12h)" }, { "version_affected": "=", "version_value": "2.0(12i)" }, { "version_affected": "=", "version_value": "2.0(13e)" }, { "version_affected": "=", "version_value": "2.0(13f)" }, { "version_affected": "=", "version_value": "2.0(13h)" }, { "version_affected": "=", "version_value": "2.0(13i)" }, { "version_affected": "=", "version_value": "2.0(13k)" }, { "version_affected": "=", "version_value": "2.0(13n)" }, { "version_affected": "=", "version_value": "2.0(13o)" }, { "version_affected": "=", "version_value": "2.0(13p)" }, { "version_affected": "=", "version_value": "2.0(13q)" }, { "version_affected": "=", "version_value": "2.0(1a)" }, { "version_affected": "=", "version_value": "2.0(1b)" }, { "version_affected": "=", "version_value": "2.0(3d)1" }, { "version_affected": "=", "version_value": "2.0(3d)2" }, { "version_affected": "=", "version_value": "2.0(3e)1" }, { "version_affected": "=", "version_value": "2.0(3f)3" }, { "version_affected": "=", "version_value": "2.0(3i)" }, { "version_affected": "=", "version_value": "2.0(3j)1" }, { "version_affected": "=", "version_value": "2.0(4c)" }, { "version_affected": "=", "version_value": "2.0(4c)1" }, { "version_affected": "=", "version_value": "2.0(6d)" }, { "version_affected": "=", "version_value": "2.0(6f)" }, { "version_affected": "=", "version_value": "2.0(8d)" }, { "version_affected": "=", "version_value": "2.0(8e)" }, { "version_affected": "=", "version_value": "2.0(8g)" }, { "version_affected": "=", "version_value": "2.0(8h)" }, { "version_affected": "=", "version_value": "2.0(9c)" }, { "version_affected": "=", "version_value": "2.0(9e)" }, { "version_affected": "=", "version_value": "2.0(9f)" }, { "version_affected": "=", "version_value": "2.0(9l)" }, { "version_affected": "=", "version_value": "2.0(9m)" }, { "version_affected": "=", "version_value": "2.0(9n)" }, { "version_affected": "=", "version_value": "2.0(9o)" }, { "version_affected": "=", "version_value": "2.0(9p)" }, { "version_affected": "=", "version_value": "3.1(1d)" }, { "version_affected": "=", "version_value": "3.1(2b)" }, { "version_affected": "=", "version_value": "3.1(2c)" }, { "version_affected": "=", "version_value": "3.1(2d)" }, { "version_affected": "=", "version_value": "3.1(2e)" }, { "version_affected": "=", "version_value": "3.1(2g)" }, { "version_affected": "=", "version_value": "3.1(2i)" }, { "version_affected": "=", "version_value": "3.1(3a)" }, { "version_affected": "=", "version_value": "3.1(3b)" }, { "version_affected": "=", "version_value": "3.1(3c)" }, { "version_affected": "=", "version_value": "3.1(3d)" }, { "version_affected": "=", "version_value": "3.1(3g)" }, { "version_affected": "=", "version_value": "3.1(3h)" }, { "version_affected": "=", "version_value": "3.1(3i)" }, { "version_affected": "=", "version_value": "3.1(3j)" }, { "version_affected": "=", "version_value": "3.1(3k)" }, { "version_affected": "=", "version_value": "4.0(1.240)" }, { "version_affected": "=", "version_value": "4.0(1a)" }, { "version_affected": "=", "version_value": "4.0(1b)" }, { "version_affected": "=", "version_value": "4.0(1c)" }, { "version_affected": "=", "version_value": "4.0(1d)" }, { "version_affected": "=", "version_value": "4.0(1e)" }, { "version_affected": "=", "version_value": "4.0(1g)" }, { "version_affected": "=", "version_value": "4.0(1h)" }, { "version_affected": "=", "version_value": "4.0(2c)" }, { "version_affected": "=", "version_value": "4.0(2d)" }, { "version_affected": "=", "version_value": "4.0(2f)" }, { "version_affected": "=", "version_value": "4.0(2g)" }, { "version_affected": "=", "version_value": "4.0(2h)" }, { "version_affected": "=", "version_value": "4.0(2i)" }, { "version_affected": "=", "version_value": "4.0(2l)" }, { "version_affected": "=", "version_value": "4.0(2n)" }, { "version_affected": "=", "version_value": "4.0(4b)" }, { "version_affected": "=", "version_value": "4.0(4c)" }, { "version_affected": "=", "version_value": "4.0(4d)" }, { "version_affected": "=", "version_value": "4.0(4e)" }, { "version_affected": "=", "version_value": "4.0(4f)" }, { "version_affected": "=", "version_value": "4.0(4h)" }, { "version_affected": "=", "version_value": "4.0(4i)" }, { "version_affected": "=", "version_value": "4.0(4k)" }, { "version_affected": "=", "version_value": "4.0(4l)" }, { "version_affected": "=", "version_value": "4.0(4m)" }, { "version_affected": "=", "version_value": "4.0(2o)" }, { "version_affected": "=", "version_value": "4.0(2p)" }, { "version_affected": "=", "version_value": "4.0(4n)" }, { "version_affected": "=", "version_value": "4.0(2q)" }, { "version_affected": "=", "version_value": "4.0(2r)" }, { "version_affected": "=", "version_value": "4.1(1c)" }, { "version_affected": "=", "version_value": "4.1(1d)" }, { "version_affected": "=", "version_value": "4.1(1f)" }, { "version_affected": "=", "version_value": "4.1(1g)" }, { "version_affected": "=", "version_value": "4.1(2a)" }, { "version_affected": "=", "version_value": "4.1(1h)" }, { "version_affected": "=", "version_value": "4.1(2b)" }, { "version_affected": "=", "version_value": "4.1(2f)" }, { "version_affected": "=", "version_value": "4.1(2e)" }, { "version_affected": "=", "version_value": "4.1(3b)" }, { "version_affected": "=", "version_value": "4.1(2d)" }, { "version_affected": "=", "version_value": "4.1(3c)" }, { "version_affected": "=", "version_value": "4.1(3d)" }, { "version_affected": "=", "version_value": "4.1(2g)" }, { "version_affected": "=", "version_value": "4.1(3f)" }, { "version_affected": "=", "version_value": "4.1(2h)" }, { "version_affected": "=", "version_value": "4.1(2j)" }, { "version_affected": "=", "version_value": "4.1(2k)" }, { "version_affected": "=", "version_value": "4.1(2l)" }, { "version_affected": "=", "version_value": "4.1(3h)" }, { "version_affected": "=", "version_value": "4.1(3i)" }, { "version_affected": "=", "version_value": "4.1(3l)" }, { "version_affected": "=", "version_value": "4.2(1a)" }, { "version_affected": "=", "version_value": "4.2(1b)" }, { "version_affected": "=", "version_value": "4.2(1c)" }, { "version_affected": "=", "version_value": "4.2(1e)" }, { "version_affected": "=", "version_value": "4.2(1f)" }, { "version_affected": "=", "version_value": "4.2(1g)" }, { "version_affected": "=", "version_value": "4.2(1i)" }, { "version_affected": "=", "version_value": "4.2(1j)" }, { "version_affected": "=", "version_value": "4.2(2a)" }, { "version_affected": "=", "version_value": "4.2(2f)" }, { "version_affected": "=", "version_value": "4.2(2g)" }, { "version_affected": "=", "version_value": "4.2(3b)" }, { "version_affected": "=", "version_value": "4.2(3d)" }, { "version_affected": "=", "version_value": "4.2(3e)" }, { "version_affected": "=", "version_value": "4.2(3g)" }, { "version_affected": "=", "version_value": "4.2(3h)" }, { "version_affected": "=", "version_value": "4.2(3i)" }, { "version_affected": "=", "version_value": "4.3(1.230097)" }, { "version_affected": "=", "version_value": "4.3(1.230124)" }, { "version_affected": "=", "version_value": "4.3(1.230138)" }, { "version_affected": "=", "version_value": "4.3(2.230207)" }, { "version_affected": "=", "version_value": "4.3(2.230270)" } ] } }, { "product_name": "Cisco Unified Computing System E-Series Software (UCSE)", "version": { "version_data": [ { "version_affected": "=", "version_value": "N/A" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-mUx4c5AJ", "refsource": "MISC", "name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-mUx4c5AJ" } ] }, "source": { "advisory": "cisco-sa-cimc-cmd-inj-mUx4c5AJ", "discovery": "EXTERNAL", "defects": [ "CSCwi12864", "CSCwi29799", "CSCwi10842" ] }, "exploit": [ { "lang": "en", "value": "The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerability that is described in this advisory.\r\n\r\nThe Cisco PSIRT is not aware of any malicious use of the vulnerability that is described in this advisory." } ], "impact": { "cvss": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ] } }