Cisco Expressway-E vulnerabilities

1 known vulnerability affecting cisco/expressway-e.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-20497MEDIUMCVSS 4.3fixed in 15.22024-09-04

CVE-2024-20497 [MEDIUM] CWE-285 CVE-2024-20497: A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacke A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A succ