AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-20326

HIGH · CVSS 7.8 EPSS 0.34% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-05-16 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects Cisco. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2024-20326
Severity
HIGH
CVSS
7.8
EPSS
0.34%
Cisco

Original NVD Description

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system. This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user.

Related CVEs

Other vulnerabilities affecting the same vendor(s)