This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Cisco IOS, IOS XE and IMC fix 3 vulnerabilities

Cisco fixes 3 vulnerabilities in the IOS, IOS XE and Integrated Management Controller (IMC) products. The fixed versions for all types of affected IMC hardware can be found at [1][2]. The remaining fixed versions can be obtained at [3], where you must enter the type and version of your product on the first page. On the next page, you must select all impact ratings and all security advisories. On the last page, you must select the highest of the displayed fixed versions and update your affected device to it.

Cisco IMC - command injection (CVE-2024-20356)
CVSS 8.7 (High)

An authenticated remote attacker with administrator privileges can use the web-based management interface in IMC to execute commands in the operating system and thereby obtain root privileges [1].

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

More information:

The vulnerability was publicly disclosed 17. 4. 2024.

Cisco IMC - command injection (CVE-2024-20295)
CVSS 8.8 (High)

An authenticated local attacker with read-only privileges can use the command line interface in IMC to execute commands in the operating system and thereby obtain root privileges [2].

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 17. 4. 2024.

Cisco IOS + IOS XE - security bypass (CVE-2024-20373)
CVSS 5.3 (Medium)

An unauthenticated remote attacker can gain unauthorized access to information in IOS and IOS XE via the SNMP protocol. To exploit the vulnerability, the attacker needs a valid community string for SNMPv2c or credentials for SNMPv3 [4].

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

More information:

The vulnerability was publicly disclosed 17. 4. 2024.

By CESNET, z.s.p.o. Martin Krajči on 18. 4. 2024.

CESNET, z.s.p.o. Logo