{"cvss":6.0,"datePublished":"2024-07-02","dateUpdated":"2024-07-02","description":"Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.","dueDate":"2024-07-23","id":"CVE-2024-20399","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP;   https://nvd.nist.gov/vuln/detail/CVE-2024-20399","product":"NX-OS","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"MEDIUM","source":"cisa_known_exploited","title":"Cisco NX-OS Command Injection Vulnerability","vendor":"Cisco"}