PT-2024-2032 · Cisco · Cisco Secure Client

Ivan Agarkov · Published 2024-03-06 · Updated 2025-07-22 · CVE-2024-20338

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Client versions (affected versions not specified)

Description The issue is related to an uncontrolled search path element in the ISE Posture (System Scan) module. This could allow an authenticated, local attacker to elevate privileges on an affected device. An attacker could exploit this by copying a malicious library file to a specific directory and persuading an administrator to restart a specific process, potentially allowing the execution of arbitrary code with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2024-01910

CVE-2024-20338

Affected Products

Cisco Secure Client

References · 11

• 🔥 https://github.com/annmuor/CVE-2024-20338 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-20338 · Security Note
• https://bdu.fstec.ru/vul/2024-01910 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20338 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-privesc-sYxQO6ds · Vendor Advisory
• https://twitter.com/CyberHoots/status/1946234843265736714 · Twitter Post
• https://t.me/cvenotify/73254 · Telegram Post
• https://t.me/cvenotify/73143 · Telegram Post
• https://t.me/cveNotify/129870 · Telegram Post
• https://twitter.com/XynikIT/status/1766025393465606547 · Twitter Post
• https://twitter.com/fletch_ai/status/1765922164358729976 · Twitter Post