CVE-2024-20289
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Cisco NX-OS Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments for a specific CLI command. An attacker could exploit this vulnerability by including crafted input as the argument of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco NX-OS Software
- Vendor
- Cisco
- Product
- Cisco NX-OS Software
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.3(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.1(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.1(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(5w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(7) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(7k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(7a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(8) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(1q) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(9) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.1(2t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(3t) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(10) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(11) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(5) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.3(12) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(3v) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(1) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(99w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.2(6) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3w) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(99x) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.4(2) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3q) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3x) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(4g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.3(3r) | affected | Unavailable | Unavailable | Unavailable | None listed |
Cisco NX-OS System Software in ACI Mode
- Vendor
- Cisco
- Product
- Cisco NX-OS System Software in ACI Mode
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 16.0(2h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 16.0(2j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 16.0(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 16.0(3e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 16.0(4c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 16.0(5h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 16.0(3g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 16.0(5j) | affected | Unavailable | Unavailable | Unavailable | None listed |