{"uuid": "023c373a-ef2d-4e70-a91a-1ff34ff7f977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20399", "type": "exploited", "source": "https://t.me/KomunitiSiber/2193", "content": "Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware\nhttps://thehackernews.com/2024/07/chinese-hackers-exploiting-cisco.html\n\nA China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware.\nThe vulnerability, tracked as CVE-2024-20399 (CVSS score: 6.0), concerns a case of command injection that allows an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected", "creation_timestamp": "2024-07-02T08:35:44.000000Z"}