CVE-2024-20394 MEDIUM

CVE-2024-20394

Vendor Cisco
Product Cisco AppDynamics
Weakness CWE-20 · Input validation
Published May 15, 2024
Last update August 9, 2024

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the inability to handle unexpected input. An attacker who has local device access could exploit this vulnerability by sending an HTTP request to the targeted service. A successful exploit could allow the attacker to cause a DoS condition by stopping the Network Agent Service on the local device.

Key dates

02Disclosure timeline

May 15, 2024 CVE published
August 9, 2024 Record updated