PT-2024-1542 · Cisco · Cisco Thousandeyes Enterprise Agent

Published 2024-01-10 · Updated 2024-02-02 · CVE-2024-20277

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type (affected versions not specified)

Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This issue is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device, potentially allowing the execution of arbitrary commands and elevation of privileges to root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-01077

CVE-2024-20277

Affected Products

Cisco Thousandeyes Enterprise Agent

References · 7

• https://osv.dev/vulnerability/CVE-2024-20277 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01077 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20277 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-thouseyes-privesc-DmzHG3Qv · Vendor Advisory
• https://twitter.com/RedPacketSec/status/1745386452010058083 · Twitter Post
• https://twitter.com/CVEnew/status/1747669018893513137 · Twitter Post
• https://t.me/cvenotify/69109 · Telegram Post