What is CVE-2024-20277?

CVE-2024-20277 is a medium-severity vulnerability in Cisco Thousandeyes Recorder Application, classified under OS Command Injection. CVSS score: 6.8/10. Published 2024-01-17.

How severe is CVE-2024-20277?

Medium severity. CVSS v3 base score is 6.8 out of 10.

RCE in Cisco Thousandeyes Recorder Application

CVE-2024-20277

A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.008 (53.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H.

Affected products

Cisco Thousandeyes Recorder Application — versions N/A
Cisco Thousandeyes_enterprise_agent

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

psirt@cisco.com (Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2024-20277?: CVE-2024-20277 is a medium-severity vulnerability in Cisco Thousandeyes Recorder Application, classified under OS Command Injection. CVSS score: 6.8/10. Published 2024-01-17.
How severe is CVE-2024-20277?: Medium severity. CVSS v3 base score is 6.8 out of 10.