Analysis Summary

CVE-2024-20440 CVSS:9.8

Cisco Smart Licensing Utility could allow a remote attacker to obtain sensitive information, caused by excessive verbosity in a debug log file. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to obtain log files that contain sensitive data, including credentials that can be used to access the API.

CVE-2024-20439 CVSS:9.8

Cisco Smart Licensing Utility could allow a remote attacker to bypass security restrictions, caused by an undocumented static user credential for an administrative account. By using the static credentials, an attacker could exploit this vulnerability to log in to the affected system with administrative privileges over the API of the Cisco Smart Licensing Utility application.

CVE-2024-20430 CVSS:7.3

Cisco Meraki Systems Manager Agent for Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of directory search paths at runtime. By placing both specially crafted configuration files and malicious DLL files, an authenticated attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges.

Impact

• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2024-20439
• CVE-2024-20440
• CVE-2024-20430

Affected Vendors

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.

CVE-2024-20440

CVE-2024-20439

CVE-2024-20430