https://pwn.watch/t/nx-os Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 02 Jul 2024 00:00:00 GMT https://pwn.watch/i/cisco-nx-os-cve-2024-20399 https://pwn.watch/i/cisco-nx-os-cve-2024-20399 Tue, 02 Jul 2024 00:00:00 GMT medium <p>Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device. Added to the CISA KEV catalog on 2024-07-02.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-07-02: CISA added CVE-2024-20399 to the KEV catalog (federal deadline 2024-07-23) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li><li>2024-07-01: CVE-2024-20399 published (<a href="https://nvd.nist.gov/vuln/detail/CVE-2024-20399">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2024-20399</p>