Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2024-20278

A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input over NETCONF to an affected device. A successful exploit could allow the attacker to elevate privileges from Administrator to root.

SeverityMEDIUM
CVSS6.5
CWECWE-184
KEV No
Published
Modified

Related Products

Product Advisory Evidence
Cisco IOS cisco-sa-iosxe-priv-esc-seAx6NLX Cisco OpenVuln
Cisco IOS XE Software cisco-sa-iosxe-priv-esc-seAx6NLX Cisco OpenVuln
Cisco Catalyst 9600 Series Switches cisco-sa-iosxe-priv-esc-seAx6NLX Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches cisco-sa-iosxe-priv-esc-seAx6NLX Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches cisco-sa-iosxe-priv-esc-seAx6NLX Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches cisco-sa-iosxe-priv-esc-seAx6NLX Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches cisco-sa-iosxe-priv-esc-seAx6NLX Cisco OpenVuln · software-dependent