CVE-2024-20394

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published May 15, 2024
CWE ID 20

Summary

CVE-2024-20394 is a newly disclosed vulnerability affecting Cisco AppDynamics Network Visibility Agent. This issue permits an unauthenticated, local attacker to induce a denial of service (DoS) condition on targeted devices. The vulnerability stems from the agent's inability to process unexpected input. An attacker can leverage this flaw by sending malicious HTTP requests to the affected service, potentially leading to the termination of the Network Agent Service and causing a DoS condition on the local device.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share