PT-2024-1909 · Cisco · Cisco Nexus 3000 Series Switches+2

Published 2024-02-28 · Updated 2024-03-04 · CVE-2024-20291

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus 3000 and 9000 Series Switches (affected versions not specified)

Description A vulnerability in the access control list (ACL) programming for port channel subinterfaces could allow an unauthenticated, remote attacker to send traffic that should be blocked through an affected device. This issue is due to incorrect hardware programming that occurs when configuration changes are made to port channel member ports. An attacker could exploit this vulnerability by attempting to send traffic through an affected device, potentially accessing network resources that should be protected by an ACL applied on port channel subinterfaces.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Incorrect Authorization

Weakness Enumeration

CWE-284

CWE-863

Related Identifiers

BDU:2024-01688

CVE-2024-20291

Affected Products

Cisco Nexus

Cisco Nexus 3000 Series Switches

Cisco Nexus 9000 Series Switches

References · 8

• 🔥 https://github.com/Instructor-Team8/CVE-2024-20291-POC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-20291 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20291 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-po-acl-TkyePgvL · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01688 · Security Note
• https://vuldb.com/?id.255131 · Note
• https://twitter.com/CVEnew/status/1762883648682856873 · Twitter Post
• https://t.me/cybersecuritytechnologies/10085 · Telegram Post