Skip to content
fr Sign in
6.0 Medium

CVE-2024-20306 A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an…

Description

A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying host operating system. To exploit this vulnerability, an attacker must have level 15 privileges on the affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting a crafted CLI command to an affected device. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying operating system.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS XE Software 17.12 17.12.1w → 17.12.1 No fix stated
Cisco IOS XE Software 17.11 17.11.1a → 17.11.99SW No fix stated
Cisco IOS XE Software 17.10 17.10.1a → 17.10.1 No fix stated
ios_xe 17.12 17.12.1w → 17.12.1 No fix stated
ios_xe 17.11 17.11.1a → 17.11.99SW No fix stated
ios_xe 17.10 17.10.1a → 17.10.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco IOS XE Software

The 248 CVEs of Cisco IOS XE Software →
CVE-2026-20311 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 6.3 Medium CVE-2026-20301 A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of… 8.6 High CVE-2026-20308 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 4.3 Medium CVE-2026-20273 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering… 8.6 High
Track this CVE