CVE-2024-20435

State: Published
Severity: 8.8 High
Published: Jul 17, 2024
Updated: Aug 1, 2024
Reserved: Nov 8, 2023

Description

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	cisco

Weaknesses

CWE-250 Execution with Unnecessary Privileges

Affected Products

Product	Versions
Cisco Secure Web ApplianceCisco	11.7.0-406Affected 11.7.0-418Affected 11.7.1-049Affected 11.7.1-006Affected 11.7.1-020Affected 11.7.2-011Affected 11.8.0-414Affected 11.8.1-023Affected 11.8.3-018Affected 11.8.3-021Affected 12.0.1-268Affected 12.0.3-007Affected 12.5.2-007Affected 12.5.1-011Affected 12.5.4-005Affected 12.5.5-004Affected 12.5.6-008Affected 14.5.0-498Affected 14.5.1-016Affected 14.5.2-011Affected 14.0.3-014Affected 14.0.2-012Affected 14.0.4-005Affected 14.0.5-007Affected 15.0.0-322Affected and 2 more versions

Product

Versions

Cisco Secure Web ApplianceCisco

11.7.0-406Affected
11.7.0-418Affected
11.7.1-049Affected
11.7.1-006Affected
11.7.1-020Affected
11.7.2-011Affected
11.8.0-414Affected
11.8.1-023Affected
11.8.3-018Affected
11.8.3-021Affected
12.0.1-268Affected
12.0.3-007Affected
12.5.2-007Affected
12.5.1-011Affected
12.5.4-005Affected
12.5.5-004Affected
12.5.6-008Affected
14.5.0-498Affected
14.5.1-016Affected
14.5.2-011Affected
14.0.3-014Affected
14.0.2-012Affected
14.0.4-005Affected
14.0.5-007Affected
15.0.0-322Affected
and 2 more versions

References

cisco-sa-swa-priv-esc-7uHpZsCC

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.