CVE-2024-20282

Summary

CVE-2024-20282 is a vulnerability affecting Cisco Nexus Dashboard. An authenticated, local attacker with valid rescue-user credentials can exploit insufficient protections for a sensitive access token to elevate privileges to root on an affected device. This vulnerability poses a significant risk, as an attacker could gain unrestricted access to the filesystem or hosted containers on the device, potentially leading to serious data breaches or system compromise. It is crucial that affected organizations apply the necessary patches to mitigate this vulnerability promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.