coldbraid

CVE-2024-20399 Cisco NX-OS

Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.

CVSS
not scored

CWE-78

On CISA’s exploited list

Cisco NX-OS Command Injection Vulnerability

Added
2024-07-02
Federal patch deadline
2024-07-23
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)