CVE-2024-20437

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description The issue is related to insufficient CSRF protections for the web-based management interface of Cisco IOS XE Software, allowing an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack. This could enable the attacker to execute commands on the CLI of an affected device by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.