Description

A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system through the web UI. This vulnerability is due to incorrectly accepting configuration changes through the HTTP GET method. An attacker could exploit this vulnerability by persuading a currently authenticated administrator to follow a crafted link. A successful exploit could allow the attacker to change the configuration of the affected device.

INFO

Published Date :

2024-09-25T16:29:36.509Z

Last Modified :

2024-09-25T18:00:35.918Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2024-20414 vulnerability.

Vendors Products
Cisco
  • Ios
  • Ios Xe
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-20414.

URL Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-HfwnRgk cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact