CVE-2024-20492 Cisco Expressway Series Privilege Escalation Vulnerability
An authenticated local attacker with admin credentials can inject commands to escape the restricted shell and gain root privileges on Cisco Expressway devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-20492?
CVE-2024-20492 is a medium-severity command injection vulnerability in Cisco TelePresence Video Communication Server (VCS) Expressway, published on 2 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have Administrator-level credentials with read-write privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a series of crafted CLI commands. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of the affected device. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
Weakness: CWE-77
Which versions are affected by CVE-2024-20492?
It affects 1 product.
Products include Cisco Telepresence Video Communication Server.
How do I fix CVE-2024-20492?
No fix has been published for CVE-2024-20492 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-20492 being exploited?
There is no known exploitation of CVE-2024-20492 in the wild and no public exploit code.
Other vulnerabilities in Cisco TelePresence Video Communication Server (VCS) Expressway
- CVE-2023-20105 Privilege escalation in Cisco TelePresence Video Communication Server (VCS) Expressway
- CVE-2023-20192 Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities
- CVE-2022-20754 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- CVE-2022-20755 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- CVE-2016-1468 Command injection in n/a
Sources
Also known as GHSA-vp8m-pwx8-8rhh.