Improper input validation in Cisco Appdynamics
CVE-2024-20394
A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the inability to handle unexpected input. An attacker who has local device access could exploit this vulnerability by sending an HTTP request to the targeted service. A successful exploit could allow the attacker to cause a DoS condition by stopping the Network Agent Service on the local device.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (4.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.
Affected products
- Cisco Appdynamics
- Cisco Appdynamics — versions N/A
Weakness classification (CWE)
References
- psirt@cisco.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-20394?
- CVE-2024-20394 is a medium-severity vulnerability in Cisco Appdynamics, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2024-05-15.
- How severe is CVE-2024-20394?
- Medium severity. CVSS v3 base score is 5.5 out of 10.