A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device.
This vulnerability is due to insufficient access control implementations on cluster configuration CLI requests. An attacker could exploit this vulnerability by sending a cluster configuration CLI request to specific directories on an affected device. A successful exploit could allow the attacker to read and modify data that is handled by an internal service on the affected device.
This vulnerability is due to insufficient access control implementations on cluster configuration CLI requests. An attacker could exploit this vulnerability by sending a cluster configuration CLI request to specific directories on an affected device. A successful exploit could allow the attacker to read and modify data that is handled by an internal service on the affected device.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Cisco |
|
Configuration 1 [-]
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-18040 | A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations on cluster configuration CLI requests. An attacker could exploit this vulnerability by sending a cluster configuration CLI request to specific directories on an affected device. A successful exploit could allow the attacker to read and modify data that is handled by an internal service on the affected device. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sat, 12 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Tue, 06 May 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Cisco
Cisco unified Intelligence Center |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Cisco
Cisco unified Intelligence Center |
MITRE
Status: PUBLISHED
Assigner: cisco
Published:
Updated: 2024-08-27T21:08:46.957Z
Reserved: 2023-11-08T15:08:07.640Z
Link: CVE-2024-20325
Vulnrichment
Updated: 2024-08-01T21:59:41.553Z
NVD
Status : Analyzed
Published: 2024-02-21T17:15:09.180
Modified: 2025-05-06T17:43:06.773
Link: CVE-2024-20325
Redhat
No data.
OpenCVE Enrichment
No data.