{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2024-20478", "ASSIGNER": "psirt@cisco.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authenticated, remote attacker with Administrator-level privileges to install a modified software image, leading to arbitrary code injection on an affected system.\r\n\r\nThis vulnerability is due to insufficient signature validation of software images. An attacker could exploit this vulnerability by installing a modified software image. A successful exploit could allow the attacker to execute arbitrary code on the affected system and elevate their privileges to root.\r\nNote: Administrators should always validate the hash of any upgrade image before uploading it to Cisco APIC and Cisco Cloud Network Controller." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Execution with Unnecessary Privileges", "cweId": "CWE-250" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Cisco", "product": { "product_data": [ { "product_name": "Cisco Application Policy Infrastructure Controller (APIC)", "version": { "version_data": [ { "version_affected": "=", "version_value": "3.2(8d)" }, { "version_affected": "=", "version_value": "2.2(1o)" }, { "version_affected": "=", "version_value": "1.2(2h)" }, { "version_affected": "=", "version_value": "2.2(2i)" }, { "version_affected": "=", "version_value": "1.2(1k)" }, { "version_affected": "=", "version_value": "2.2(1k)" }, { "version_affected": "=", "version_value": "3.1(2m)" }, { "version_affected": "=", "version_value": "3.2(1m)" }, { "version_affected": "=", "version_value": "3.2(5e)" }, { "version_affected": "=", "version_value": "4.1(2m)" }, { "version_affected": "=", "version_value": "3.2(41d)" }, { "version_affected": "=", "version_value": "1.1(1o)" }, { "version_affected": "=", "version_value": "1.2(1m)" }, { "version_affected": "=", "version_value": "1.2(2j)" }, { "version_affected": "=", "version_value": "2.2(4r)" }, { "version_affected": "=", "version_value": "2.2(3j)" }, { "version_affected": "=", "version_value": "1.1(3f)" }, { "version_affected": "=", "version_value": "2.2(2f)" }, { "version_affected": "=", "version_value": "1.1(4m)" }, { "version_affected": "=", "version_value": "2.2(2k)" }, { "version_affected": "=", "version_value": "2.1(1i)" }, { "version_affected": "=", "version_value": "2.0(1p)" }, { "version_affected": "=", "version_value": "3.1(2p)" }, { "version_affected": "=", "version_value": "3.2(3s)" }, { "version_affected": "=", "version_value": "4.0(3c)" }, { "version_affected": "=", "version_value": "1.1(4e)" }, { "version_affected": "=", "version_value": "4.1(1k)" }, { "version_affected": "=", "version_value": "2.2(4f)" }, { "version_affected": "=", "version_value": "2.1(3h)" }, { "version_affected": "=", "version_value": "3.2(4d)" }, { "version_affected": "=", "version_value": "2.0(1n)" }, { "version_affected": "=", "version_value": "2.0(1m)" }, { "version_affected": "=", "version_value": "2.0(1r)" }, { "version_affected": "=", "version_value": "2.1(2e)" }, { "version_affected": "=", "version_value": "4.2(2e)" }, { "version_affected": "=", "version_value": "4.2(3j)" }, { "version_affected": "=", "version_value": "4.2(3n)" }, { "version_affected": "=", "version_value": "2.0(1l)" }, { "version_affected": "=", "version_value": "2.2(2e)" }, { "version_affected": "=", "version_value": "2.2(3r)" }, { "version_affected": "=", "version_value": "3.0(2k)" }, { "version_affected": "=", "version_value": "2.1(3g)" }, { "version_affected": "=", "version_value": "4.0(1h)" }, { "version_affected": "=", "version_value": "2.0(1o)" }, { "version_affected": "=", "version_value": "2.2(3p)" }, { "version_affected": "=", "version_value": "1.2(3e)" }, { "version_affected": "=", "version_value": "2.2(3s)" }, { "version_affected": "=", "version_value": "2.0(2g)" }, { "version_affected": "=", "version_value": "4.1(1l)" }, { "version_affected": "=", "version_value": "3.2(9f)" }, { "version_affected": "=", "version_value": "4.2(3l)" }, { "version_affected": "=", "version_value": "4.2(2g)" }, { "version_affected": "=", "version_value": "1.2(3c)" }, { "version_affected": "=", "version_value": "3.2(7k)" }, { "version_affected": "=", "version_value": "1.3(2h)" }, { "version_affected": "=", "version_value": "3.2(9b)" }, { "version_affected": "=", "version_value": "1.3(2k)" }, { "version_affected": "=", "version_value": "3.1(2t)" }, { "version_affected": "=", "version_value": "1.1(2h)" }, { "version_affected": "=", "version_value": "3.2(3j)" }, { "version_affected": "=", "version_value": "2.1(2k)" }, { "version_affected": "=", "version_value": "2.3(1f)" }, { "version_affected": "=", "version_value": "1.2(3h)" }, { "version_affected": "=", "version_value": "3.0(1i)" }, { "version_affected": "=", "version_value": "4.1(2u)" }, { "version_affected": "=", "version_value": "4.2(1l)" }, { "version_affected": "=", "version_value": "4.1(1a)" }, { "version_affected": "=", "version_value": "4.0(3d)" }, { "version_affected": "=", "version_value": "1.1(4l)" }, { "version_affected": "=", "version_value": "2.3(1i)" }, { "version_affected": "=", "version_value": "3.1(2q)" }, { "version_affected": "=", "version_value": "3.2(4e)" }, { "version_affected": "=", "version_value": "4.1(1i)" }, { "version_affected": "=", "version_value": "3.1(1i)" }, { "version_affected": "=", "version_value": "2.0(2m)" }, { "version_affected": "=", "version_value": "3.0(2h)" }, { "version_affected": "=", "version_value": "2.2(2q)" }, { "version_affected": "=", "version_value": "2.3(1l)" }, { "version_affected": "=", "version_value": "1.3(1h)" }, { "version_affected": "=", "version_value": "3.0(2n)" }, { "version_affected": "=", "version_value": "3.2(5f)" }, { "version_affected": "=", "version_value": "1.2(1h)" }, { "version_affected": "=", "version_value": "3.2(1l)" }, { "version_affected": "=", "version_value": "4.2(1i)" }, { "version_affected": "=", "version_value": "4.1(2o)" }, { "version_affected": "=", "version_value": "1.2(1i)" }, { "version_affected": "=", "version_value": "1.3(1j)" }, { "version_affected": "=", "version_value": "2.1(1h)" }, { "version_affected": "=", "version_value": "2.0(2l)" }, { "version_affected": "=", "version_value": "2.0(2h)" }, { "version_affected": "=", "version_value": "1.2(2g)" }, { "version_affected": "=", "version_value": "3.0(1k)" }, { "version_affected": "=", "version_value": "4.2(1g)" }, { "version_affected": "=", "version_value": "2.1(2g)" }, { "version_affected": "=", "version_value": "2.0(1q)" }, { "version_affected": "=", "version_value": "1.1(1j)" }, { "version_affected": "=", "version_value": "4.1(2g)" }, { "version_affected": "=", "version_value": "1.1(1r)" }, { "version_affected": "=", "version_value": "4.2(2f)" }, { "version_affected": "=", "version_value": "3.2(6i)" }, { "version_affected": "=", "version_value": "1.3(1g)" }, { "version_affected": "=", "version_value": "1.3(2j)" }, { "version_affected": "=", "version_value": "1.3(2i)" }, { "version_affected": "=", "version_value": "2.0(2o)" }, { "version_affected": "=", "version_value": "2.2(4q)" }, { "version_affected": "=", "version_value": "2.3(1o)" }, { "version_affected": "=", "version_value": "3.2(3i)" }, { "version_affected": "=", "version_value": "2.2(2j)" }, { "version_affected": "=", "version_value": "1.1(1d)" }, { "version_affected": "=", "version_value": "2.0(2n)" }, { "version_affected": "=", "version_value": "2.2(3t)" }, { "version_affected": "=", "version_value": "3.2(3n)" }, { "version_affected": "=", "version_value": "1.1(4g)" }, { "version_affected": "=", "version_value": "4.1(2x)" }, { "version_affected": "=", "version_value": "3.2(5d)" }, { "version_affected": "=", "version_value": "3.1(2o)" }, { "version_affected": "=", "version_value": "1.2(2i)" }, { "version_affected": "=", "version_value": "2.1(2f)" }, { "version_affected": "=", "version_value": "1.3(2f)" }, { "version_affected": "=", "version_value": "4.2(3q)" }, { "version_affected": "=", "version_value": "4.1(1j)" }, { "version_affected": "=", "version_value": "2.0(2f)" }, { "version_affected": "=", "version_value": "2.3(1e)" }, { "version_affected": "=", "version_value": "1.1(1s)" }, { "version_affected": "=", "version_value": "3.1(2v)" }, { "version_affected": "=", "version_value": "4.1(2w)" }, { "version_affected": "=", "version_value": "1.1(4i)" }, { "version_affected": "=", "version_value": "3.1(2u)" }, { "version_affected": "=", "version_value": "1.1(4f)" }, { "version_affected": "=", "version_value": "3.0(2m)" }, { "version_affected": "=", "version_value": "2.0(1k)" }, { "version_affected": "=", "version_value": "3.2(2o)" }, { "version_affected": "=", "version_value": "3.2(3r)" }, { "version_affected": "=", "version_value": "1.1(2i)" }, { "version_affected": "=", "version_value": "4.0(2c)" }, { "version_affected": "=", "version_value": "1.3(1i)" }, { "version_affected": "=", "version_value": "4.1(2s)" }, { "version_affected": "=", "version_value": "3.2(7f)" }, { "version_affected": "=", "version_value": "1.2(3m)" }, { "version_affected": "=", "version_value": "3.2(3o)" }, { "version_affected": "=", "version_value": "3.1(2s)" }, { "version_affected": "=", "version_value": "3.2(2l)" }, { "version_affected": "=", "version_value": "4.2(1j)" }, { "version_affected": "=", "version_value": "2.3(1p)" }, { "version_affected": "=", "version_value": "2.1(4a)" }, { "version_affected": "=", "version_value": "1.1(1n)" }, { "version_affected": "=", "version_value": "2.2(1n)" }, { "version_affected": "=", "version_value": "2.2(4p)" }, { "version_affected": "=", "version_value": "2.1(3j)" }, { "version_affected": "=", "version_value": "4.2(4i)" }, { "version_affected": "=", "version_value": "3.2(9h)" }, { "version_affected": "=", "version_value": "5.0(1k)" }, { "version_affected": "=", "version_value": "4.2(4k)" }, { "version_affected": "=", "version_value": "5.0(1l)" }, { "version_affected": "=", "version_value": "5.0(2e)" }, { "version_affected": "=", "version_value": "4.2(4o)" }, { "version_affected": "=", "version_value": "4.2(4p)" }, { "version_affected": "=", "version_value": "5.0(2h)" }, { "version_affected": "=", "version_value": "4.2(5k)" }, { "version_affected": "=", "version_value": "4.2(5l)" }, { "version_affected": "=", "version_value": "4.2(5n)" }, { "version_affected": "=", "version_value": "5.1(1h)" }, { "version_affected": "=", "version_value": "4.2(6d)" }, { "version_affected": "=", "version_value": "5.1(2e)" }, { "version_affected": "=", "version_value": "4.2(6g)" }, { "version_affected": "=", "version_value": "4.2(6h)" }, { "version_affected": "=", "version_value": "5.1(3e)" }, { "version_affected": "=", "version_value": "3.2(10e)" }, { "version_affected": "=", "version_value": "4.2(6l)" }, { "version_affected": "=", "version_value": "4.2(7f)" }, { "version_affected": "=", "version_value": "5.1(4c)" }, { "version_affected": "=", "version_value": "4.2(6o)" }, { "version_affected": "=", "version_value": "5.2(1g)" }, { "version_affected": "=", "version_value": "5.2(2e)" }, { "version_affected": "=", "version_value": "4.2(7l)" }, { "version_affected": "=", "version_value": "3.2(10f)" }, { "version_affected": "=", "version_value": "5.2(2f)" }, { "version_affected": "=", "version_value": "5.2(2g)" }, { "version_affected": "=", "version_value": "4.2(7q)" }, { "version_affected": "=", "version_value": "5.2(2h)" }, { "version_affected": "=", "version_value": "5.2(3f)" }, { "version_affected": "=", "version_value": "5.2(3e)" }, { "version_affected": "=", "version_value": "5.2(3g)" }, { "version_affected": "=", "version_value": "4.2(7r)" }, { "version_affected": "=", "version_value": "4.2(7s)" }, { "version_affected": "=", "version_value": "5.2(4d)" }, { "version_affected": "=", "version_value": "5.2(4e)" }, { "version_affected": "=", "version_value": "4.2(7t)" }, { "version_affected": "=", "version_value": "5.2(5d)" }, { "version_affected": "=", "version_value": "3.2(10g)" }, { "version_affected": "=", "version_value": "5.2(5c)" }, { "version_affected": "=", "version_value": "6.0(1g)" }, { "version_affected": "=", "version_value": "4.2(7u)" }, { "version_affected": "=", "version_value": "5.2(5e)" }, { "version_affected": "=", "version_value": "5.2(4f)" }, { "version_affected": "=", "version_value": "5.2(6e)" }, { "version_affected": "=", "version_value": "6.0(1j)" }, { "version_affected": "=", "version_value": "5.2(6g)" }, { "version_affected": "=", "version_value": "5.2(7f)" }, { "version_affected": "=", "version_value": "4.2(7v)" }, { "version_affected": "=", "version_value": "5.2(7g)" }, { "version_affected": "=", "version_value": "6.0(2h)" }, { "version_affected": "=", "version_value": "4.2(7w)" }, { "version_affected": "=", "version_value": "5.2(6h)" }, { "version_affected": "=", "version_value": "5.2(4h)" }, { "version_affected": "=", "version_value": "5.2(8d)" }, { "version_affected": "=", "version_value": "6.0(2j)" }, { "version_affected": "=", "version_value": "5.2(8e)" }, { "version_affected": "=", "version_value": "6.0(3d)" }, { "version_affected": "=", "version_value": "6.0(3e)" }, { "version_affected": "=", "version_value": "5.2(8f)" }, { "version_affected": "=", "version_value": "5.2(8g)" }, { "version_affected": "=", "version_value": "5.3(1d)" }, { "version_affected": "=", "version_value": "5.2(8h)" }, { "version_affected": "=", "version_value": "6.0(4c)" }, { "version_affected": "=", "version_value": "5.3(2a)" }, { "version_affected": "=", "version_value": "5.2(8i)" }, { "version_affected": "=", "version_value": "6.0(5h)" }, { "version_affected": "=", "version_value": "5.3(2b)" }, { "version_affected": "=", "version_value": "6.0(3g)" }, { "version_affected": "=", "version_value": "6.0(5j)" }, { "version_affected": "=", "version_value": "5.3(2c)" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-priv-esc-uYQJjnuU", "refsource": "MISC", "name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-priv-esc-uYQJjnuU" } ] }, "source": { "advisory": "cisco-sa-capic-priv-esc-uYQJjnuU", "discovery": "INTERNAL", "defects": [ "CSCwj32072" ] }, "exploit": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory." } ], "impact": { "cvss": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ] } }