CVE-2024-20497
published 2024-09-04CVE-2024-20497: A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This…
PriorityP424medium4.3CVSS 3.1
AVNACLPRLUINSUCNILAN
EPSS
0.32%
24.4th percentile
A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system.
This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system.
Affected
80 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
| cisco | cisco_telepresence_video_communication_server_expressway | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Expressway Edge Improper Authorization Vulnerability
vendor_cisco·2024-09-04·CVSS 4.3
CVE-2024-20497 [MEDIUM] CWE-285 Cisco Expressway Edge Improper Authorization Vulnerability
Cisco Expressway Edge Improper Authorization Vulnerability
A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system.
This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system.
There are no workarounds that address this vulnerability.
This advisory is available at the following link
Cisco
Cisco Expressway Edge Improper Authorization Vulnerability
vendor_cisco·CVSS 3.1
CVE-2024-20497 Cisco Expressway Edge Improper Authorization Vulnerability
CVE-2024-20497: Cisco Expressway Edge Improper Authorization Vulnerability
A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system. There are no
CVSS: 3.1
CWE: CWE-285, CWE-285
Bug IDs: CSCwa25058
GHSA
GHSA-2vgj-5cmq-q6q3: A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected sys
ghsa_unreviewed·2024-09-04
CVE-2024-20497 [MEDIUM] CWE-285 GHSA-2vgj-5cmq-q6q3: A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected sys
A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system.
This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-04
Published