CVE-2024-20437

Summary

CVE-2024-20437 is a vulnerability affecting the web-based management interface of Cisco IOS XE Software. This issue permits an unauthenticated, remote attacker to carry out cross-site request forgery (CSRF) attacks, thereby executing commands on the CLI of susceptible devices. The weakness lies in insufficient CSRF protections for the interface. An attacker can trick an authenticated user into clicking a maliciously crafted link, resulting in arbitrary actions being executed on the affected device with the targeted user's privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.