{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20383", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.658Z", "datePublished": "2024-05-15T17:59:49.921Z", "dateUpdated": "2024-08-01T21:59:42.314Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-05-15T18:13:46.829Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Crosswork NSO CLI and the ConfD CLI could allow an authenticated, low-privileged, local attacker to elevate privileges to root on the underlying operating system.\r\n\r The vulnerability is due to an incorrect privilege assignment when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system."}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Email and Web Manager", "versions": [{"version": "9.0.0-087", "status": "affected"}, {"version": "11.0.0-115", "status": "affected"}, {"version": "11.0.1-161", "status": "affected"}, {"version": "11.5.1-105", "status": "affected"}, {"version": "12.0.0-452", "status": "affected"}, {"version": "12.0.1-011", "status": "affected"}, {"version": "12.5.0-636", "status": "affected"}, {"version": "12.5.0-658", "status": "affected"}, {"version": "12.5.0-678", "status": "affected"}, {"version": "12.5.0-670", "status": "affected"}, {"version": "13.0.0-277", "status": "affected"}, {"version": "13.6.2-078", "status": "affected"}, {"version": "13.8.1-068", "status": "affected"}, {"version": "13.8.1-074", "status": "affected"}, {"version": "13.8.1-108", "status": "affected"}, {"version": "12.8.1-002", "status": "affected"}, {"version": "12.8.1-021", "status": "affected"}, {"version": "14.0.0-404", "status": "affected"}, {"version": "14.1.0-223", "status": "affected"}, {"version": "14.1.0-227", "status": "affected"}, {"version": "14.2.0-212", "status": "affected"}, {"version": "14.2.0-224", "status": "affected"}, {"version": "14.2.1-020", "status": "affected"}, {"version": "14.3.0-120", "status": "affected"}, {"version": "15.0.0-334", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "cwe", "cweId": "CWE-79"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "discovery": "EXTERNAL", "defects": ["CSCwi59618"]}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20383", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-16T18:50:56.053580Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:40:43.042Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:42.314Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:42.314Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20383", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-16T18:50:56.053580Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-03T14:26:00.329Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"source": {"defects": ["CSCwi59618"], "advisory": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Email and Web Manager", "versions": [{"status": "affected", "version": "9.0.0-087"}, {"status": "affected", "version": "11.0.0-115"}, {"status": "affected", "version": "11.0.1-161"}, {"status": "affected", "version": "11.5.1-105"}, {"status": "affected", "version": "12.0.0-452"}, {"status": "affected", "version": "12.0.1-011"}, {"status": "affected", "version": "12.5.0-636"}, {"status": "affected", "version": "12.5.0-658"}, {"status": "affected", "version": "12.5.0-678"}, {"status": "affected", "version": "12.5.0-670"}, {"status": "affected", "version": "13.0.0-277"}, {"status": "affected", "version": "13.6.2-078"}, {"status": "affected", "version": "13.8.1-068"}, {"status": "affected", "version": "13.8.1-074"}, {"status": "affected", "version": "13.8.1-108"}, {"status": "affected", "version": "12.8.1-002"}, {"status": "affected", "version": "12.8.1-021"}, {"status": "affected", "version": "14.0.0-404"}, {"status": "affected", "version": "14.1.0-223"}, {"status": "affected", "version": "14.1.0-227"}, {"status": "affected", "version": "14.2.0-212"}, {"status": "affected", "version": "14.2.0-224"}, {"status": "affected", "version": "14.2.1-020"}, {"status": "affected", "version": "14.3.0-120"}, {"status": "affected", "version": "15.0.0-334"}]}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Crosswork NSO CLI and the ConfD CLI could allow an authenticated, low-privileged, local attacker to elevate privileges to root on the underlying operating system.\r\n\r The vulnerability is due to an incorrect privilege assignment when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-79", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-05-15T18:13:46.829Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20383", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:59:42.314Z", "dateReserved": "2023-11-08T15:08:07.658Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-05-15T17:59:49.921Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*", "matchCriteriaId": "4DDD9108-5581-49E9-8182-528CF111F682", "versionEndExcluding": "15.5.1-024", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m100v:-:*:*:*:*:*:*:*", "matchCriteriaId": "0C9613A5-B198-4AD2-BC74-F21ABAF79174", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m300v:-:*:*:*:*:*:*:*", "matchCriteriaId": "57831FD6-1CF3-4ABE-81BA-2576418F9083", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m600v:-:*:*:*:*:*:*:*", "matchCriteriaId": "67E804AE-4743-44AD-A364-504B0AB0D9BF", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m170:-:*:*:*:*:*:*:*", "matchCriteriaId": "3057023B-AD68-4953-A780-75EA416A7B94", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m190:-:*:*:*:*:*:*:*", "matchCriteriaId": "B87164B6-4717-4968-86F7-C62EB677FC50", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m195:-:*:*:*:*:*:*:*", "matchCriteriaId": "10BD81D0-D81A-4361-B4E8-D674732A2A33", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m380:-:*:*:*:*:*:*:*", "matchCriteriaId": "D28903F8-3C4D-4337-9721-CEC108A7E2D5", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m390:-:*:*:*:*:*:*:*", "matchCriteriaId": "84ACD394-2E45-4E8E-A342-AC57935C7038", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m390x:-:*:*:*:*:*:*:*", "matchCriteriaId": "6112D56B-B68B-40B0-8EB9-3315533110C7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m395:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A1198BC-C934-4C26-887D-D599E8128FD3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m680:-:*:*:*:*:*:*:*", "matchCriteriaId": "10374BA0-E7DD-4930-8C58-251F98B75A11", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m690:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD265B49-C691-44B3-A505-DC704E80313C", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m690x:-:*:*:*:*:*:*:*", "matchCriteriaId": "E37CFC3A-1752-4C66-BD32-CFFA46C3E6AD", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m695:-:*:*:*:*:*:*:*", "matchCriteriaId": "830693AC-A737-43B9-BBB4-E3A1C950C47F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Crosswork NSO CLI and the ConfD CLI could allow an authenticated, low-privileged, local attacker to elevate privileges to root on the underlying operating system.\r\n\r The vulnerability is due to an incorrect privilege assignment when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system."}, {"lang": "es", "value": "Una vulnerabilidad en la CLI de Cisco Crosswork NSO y la CLI de ConfD podr\u00eda permitir que un atacante local autenticado y con pocos privilegios eleve los privilegios a root en el sistema operativo subyacente. La vulnerabilidad se debe a una asignaci\u00f3n de privilegios incorrecta cuando se utilizan comandos CLI espec\u00edficos. Un atacante podr\u00eda aprovechar esta vulnerabilidad ejecutando un comando CLI afectado. Un exploit exitoso podr\u00eda permitir al atacante elevar los privilegios a root en el sistema operativo subyacente."}], "id": "CVE-2024-20383", "lastModified": "2025-08-01T10:44:34.700", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-05-15T18:15:09.910", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}