PT-2024-18655 · Cisco · Cisco Crosswork Nso Cli

Ahmad Ashraff · Published 2024-05-15 · Updated 2025-08-08 · CVE-2024-20383

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Crosswork NSO CLI and ConfD CLI (affected versions not specified)

Description A vulnerability could allow an authenticated, low-privileged, local attacker to elevate privileges to root on the underlying operating system. The issue is due to an incorrect privilege assignment when specific CLI commands are used. An attacker could exploit this by executing an affected CLI command, potentially allowing them to elevate privileges to root on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-11725

CVE-2024-20383

Affected Products

Cisco Crosswork Nso Cli

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11725 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20383 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20383 · Vendor Advisory
• https://t.me/cvenotify/79904 · Telegram Post
• https://t.me/cveNotify/131396 · Telegram Post
• https://t.me/cveNotify/130519 · Telegram Post