PT-2024-8094 · Cisco · Cisco Ios Xr

Published 2024-09-11 · Updated 2024-10-03 · CVE-2024-20489

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software (affected versions not specified)

Description: A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB credentials. This vulnerability is due to improper storage of the unencrypted database credentials on the device that is running Cisco IOS XR Software. An attacker could exploit this vulnerability by accessing the configuration files on an affected system. A successful exploit could allow the attacker to view MongoDB credentials.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-256

Related Identifiers

BDU:2024-09615

CVE-2024-20489

Affected Products

Cisco Ios Xr

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-20489 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ponctlr-ci-OHcHmsFL · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09615 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20489 · Vendor Advisory
• https://t.me/cvenotify/94325 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1833960998501257253 · Twitter Post
• https://twitter.com/CCBalert/status/1834273078685081832 · Twitter Post
• https://t.me/cvedetector/5393 · Telegram Post
• https://t.me/cvenotify/96894 · Telegram Post
• https://twitter.com/CveFindCom/status/1833913989383749856 · Twitter Post
• https://twitter.com/CVEnew/status/1833923745284800968 · Twitter Post