Improper access control in Cisco Systems, Inc products - CVE-2024-20465
Published: September 26, 2024
Vulnerability identifier: #VU97723
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-20465
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in the access control list (ACL) programming. A remote attacker can bypass the ACL on the target device.
Affected software
Cisco IOS
Industrial Ethernet 4000 Series Switches
Industrial Ethernet 5000 Series Switches
Cisco Industrial Ethernet 4010 Series Switches
Industrial Ethernet 4000 Series Switches
Industrial Ethernet 5000 Series Switches
Cisco Industrial Ethernet 4010 Series Switches
How to mitigate CVE-2024-20465
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.