CVE-2024-20489
published 2024-09-11CVE-2024-20489: A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the…
PriorityP429medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.14%
4.1th percentile
A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB credentials.
This vulnerability is due to improper storage of the unencrypted database credentials on the device that is running Cisco IOS XR Software. An attacker could exploit this vulnerability by accessing the configuration files on an affected system. A successful exploit could allow the attacker to view MongoDB credentials.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_ios_xr_software | — | — |
| cisco | cisco_ios_xr_software | — | — |
| cisco | cisco_ios_xr_software | — | — |
| cisco | cisco_ios_xr_software | — | — |
| cisco | cisco_ios_xr_software | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | routed_passive_optical_network_controller | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
vendor_cisco8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Routed Passive Optical Network Controller Vulnerabilities
vendor_cisco·2024-09-11·CVSS 8.4
CVE-2024-20483 [HIGH] CWE-256 Cisco Routed Passive Optical Network Controller Vulnerabilities
Cisco Routed Passive Optical Network Controller Vulnerabilities
Multiple vulnerabilities in Cisco Routed Passive Optical Network (PON) Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker to perform command injection attacks, execute arbitrary commands on the affected system, or retrieve a cleartext password.
For more information about these vulnerabilities, see the Details section of this advisory.
Cisco plans to release software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ponctlr-ci-OHc
Cisco
Cisco Routed Passive Optical Network Controller Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2024-20489 Cisco Routed Passive Optical Network Controller Vulnerabilities
CVE-2024-20489: Cisco Routed Passive Optical Network Controller Vulnerabilities
Multiple vulnerabilities in Cisco Routed Passive Optical Network (PON) Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker to perform command injection attacks, execute arbitrary commands on the affected system, or retrieve a cleartext password. For more information about these vulnerabilities, see the
CVSS: 3.1
CWE: CWE-256, CWE-78, CWE-256, CWE-78
Bug IDs: CSCwi81012, CSCwi81013, CSCwi81017, CSCwi81012, CSCwi81013
GHSA
GHSA-3wfw-cf7h-38c7: A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obt
ghsa_unreviewed·2024-09-11
CVE-2024-20489 [HIGH] CWE-256 GHSA-3wfw-cf7h-38c7: A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obt
A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB credentials.
This vulnerability is due to improper storage of the unencrypted database credentials on the device that is running Cisco IOS XR Software. An attacker could exploit this vulnerability by accessing the configuration files on an affected system. A successful exploit could allow the attacker to view MongoDB credentials.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-11
Published