CVE-2024-20478

Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability

State: Published
Severity: 6.5 Medium
Published: Aug 28, 2024
Updated: Sep 6, 2024
Reserved: Nov 8, 2023

Description

A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authenticated, remote attacker with Administrator-level privileges to install a modified software image, leading to arbitrary code injection on an affected system.

This vulnerability is due to insufficient signature validation of software images. An attacker could exploit this vulnerability by installing a modified software image. A successful exploit could allow the attacker to execute arbitrary code on the affected system and elevate their privileges to root. Note: Administrators should always validate the hash of any upgrade image before uploading it to Cisco APIC and Cisco Cloud Network Controller.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N	cisco

Weaknesses

CWE-250 Execution with Unnecessary Privileges

Affected Products

Product	Versions
Cisco Application Policy Infrastructure Controller (APIC)Cisco	3.2(8d)Affected 2.2(1o)Affected 1.2(2h)Affected 2.2(2i)Affected 1.2(1k)Affected 2.2(1k)Affected 3.1(2m)Affected 3.2(1m)Affected 3.2(5e)Affected 4.1(2m)Affected 3.2(41d)Affected 1.1(1o)Affected 1.2(1m)Affected 1.2(2j)Affected 2.2(4r)Affected 2.2(3j)Affected 1.1(3f)Affected 2.2(2f)Affected 1.1(4m)Affected 2.2(2k)Affected 2.1(1i)Affected 2.0(1p)Affected 3.1(2p)Affected 3.2(3s)Affected 4.0(3c)Affected and 197 more versions

Product

Versions

Cisco Application Policy Infrastructure Controller (APIC)Cisco

3.2(8d)Affected
2.2(1o)Affected
1.2(2h)Affected
2.2(2i)Affected
1.2(1k)Affected
2.2(1k)Affected
3.1(2m)Affected
3.2(1m)Affected
3.2(5e)Affected
4.1(2m)Affected
3.2(41d)Affected
1.1(1o)Affected
1.2(1m)Affected
1.2(2j)Affected
2.2(4r)Affected
2.2(3j)Affected
1.1(3f)Affected
2.2(2f)Affected
1.1(4m)Affected
2.2(2k)Affected
2.1(1i)Affected
2.0(1p)Affected
3.1(2p)Affected
3.2(3s)Affected
4.0(3c)Affected
and 197 more versions

References

cisco-sa-capic-priv-esc-uYQJjnuU

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.